FM / altere25

/var/log/apache2/domlogs/altere25

Name	Size	Mode	Actions
altereddigital.com	0	0640	edit dl rm
altereddigital.com-ssl_log	956989	0640	edit dl rm
attentivehomecare.altereddigital.com	53983	0640	edit dl rm
attentivehomecare.altereddigital.com-ssl_log	20200131	0640	edit dl rm
attentivehomecare2.altereddigital.com	27403	0640	edit dl rm
attentivehomecare2.altereddigital.com-ssl_log	206102	0640	edit dl rm
berryglowbeauty.altereddigital.com	53472	0640	edit dl rm
berryglowbeauty.altereddigital.com-ssl_log	1339907	0640	edit dl rm
dev.usaigc.altereddigital.com	0	0640	edit dl rm
dev.usaigc.altereddigital.com-ssl_log	450	0640	edit dl rm
dev.usaigc.com	1582664	0640	edit dl rm
dev.usaigc.com-ssl_log	4610273	0640	edit dl rm
highwoodoutdoorpool.altereddigital.com	159666	0640	edit dl rm
highwoodoutdoorpool.altereddigital.com-ssl_log	3745224	0640	edit dl rm
highwoodpool.altereddigital.com	89096	0640	edit dl rm
highwoodpool.altereddigital.com-ssl_log	20488498	0640	edit dl rm
infinet.altereddigital.com	125272	0640	edit dl rm
infinet.altereddigital.com-ssl_log	76247	0640	edit dl rm
labratnyc.altereddigital.com	127701	0640	edit dl rm
labratnyc.altereddigital.com-ssl_log	2157672	0640	edit dl rm
legal.altereddigital.com	3849	0640	edit dl rm
legal.altereddigital.com-ssl_log	11908	0640	edit dl rm
livemeetdev.altereddigital.com	78779	0640	edit dl rm
livemeetdev.altereddigital.com-ssl_log	80485	0640	edit dl rm
quintelacrosse.altereddigital.com	29664	0640	edit dl rm
quintelacrosse.altereddigital.com-ssl_log	33794	0640	edit dl rm
rmlldev.altereddigital.com	3263	0640	edit dl rm
rmlldev.altereddigital.com-ssl_log	17534	0640	edit dl rm
rmllproject.altereddigital.com	480517	0640	edit dl rm
rmllproject.altereddigital.com-ssl_log	39882	0640	edit dl rm
rockymountainlax.altereddigital.com	616359	0640	edit dl rm
rockymountainlax.altereddigital.com-ssl_log	8338701	0640	edit dl rm
s2fitness.altereddigital.com	146887	0640	edit dl rm
s2fitness.altereddigital.com-ssl_log	1138097	0640	edit dl rm
sportzsoft.altereddigital.com	183822	0640	edit dl rm
sportzsoft.altereddigital.com-ssl_log	120687	0640	edit dl rm
sportzsoftlivemeet.altereddigital.com	192573	0640	edit dl rm
sportzsoftlivemeet.altereddigital.com-ssl_log	1986821	0640	edit dl rm
usa-igc.altereddigital.com	3815	0640	edit dl rm
usa-igc.altereddigital.com-ssl_log	16917	0640	edit dl rm
usaigc.com.altereddigital.com	349549	0640	edit dl rm
usaigc.com.altereddigital.com-ssl_log	4312887	0640	edit dl rm
uxbridgelacrosse.altereddigital.com	14301	0640	edit dl rm
uxbridgelacrosse.altereddigital.com-ssl_log	75911	0640	edit dl rm
vaultcryptocurrency.altereddigital.com	35814	0640	edit dl rm
vaultcryptocurrency.altereddigital.com-ssl_log	27616	0640	edit dl rm

Edit: /var/log/apache2/domlogs/altere25/vaultcryptocurrency.altereddigital.com-ssl_log (27616B)

195.178.110.66 - - [02/Sep/2026:05:24:11 -0700] "GET /api/session/properties HTTP/1.1" 404 12096 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)"
37.186.221.181 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-sitemap-users-1.xml HTTP/2.0" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
129.121.76.191 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug,locale HTTP/2.0" 200 26 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
143.95.158.36 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-json/wp/v2/users/me HTTP/2.0" 401 96 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
217.64.102.75 - - [02/Sep/2026:05:31:55 -0700] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug HTTP/2.0" 200 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
69.16.218.67 - - [02/Sep/2026:05:31:53 -0700] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug HTTP/2.0" 200 26 "https://vaultcryptocurrency.altereddigital.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
50.87.143.111 - - [02/Sep/2026:05:31:59 -0700] "POST /api/graphql HTTP/2.0" 404 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
72.167.132.114 - - [02/Sep/2026:05:31:59 -0700] "GET /?author=1 HTTP/2.0" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
103.74.116.219 - - [02/Sep/2026:05:32:08 -0700] "GET /wp-json/ldlms/v2/users HTTP/2.0" 404 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
217.64.102.75 - - [02/Sep/2026:05:32:20 -0700] "GET /wp-json/wp/v2/users?capabilities=manage_options&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
167.172.113.95 - - [02/Sep/2026:05:32:34 -0700] "GET /wp-json/wp/v2/users?capabilities=publish_posts&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
37.186.221.181 - - [02/Sep/2026:05:32:39 -0700] "GET /wp-json/wp/v2/users?capabilities=edit_posts&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
69.163.176.25 - - [02/Sep/2026:05:32:50 -0700] "GET /wp-json/wp/v2/users?who=authors&per_page=100&_fields=slug,id HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
66.132.172.142 - - [02/Sep/2026:05:38:08 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.172.142 - - [02/Sep/2026:05:38:11 -0700] "GET /favicon.ico HTTP/1.1" 200 12585 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
71.6.134.234 - - [02/Sep/2026:06:16:50 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
146.59.80.51 - - [02/Sep/2026:06:24:40 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
146.59.80.51 - - [02/Sep/2026:06:24:42 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
51.89.83.146 - - [02/Sep/2026:07:23:02 -0700] "GET /accesson.php HTTP/2.0" 404 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
51.89.83.146 - - [02/Sep/2026:07:23:03 -0700] "GET /wp-content/plugins/background-image-cropper/background-image-cropper.js HTTP/2.0" 404 12145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
51.89.83.146 - - [02/Sep/2026:07:23:18 -0700] "GET /wp-content/plugins/cidaas-pro-master/composer.json HTTP/2.0" 404 12124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0"
44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "POST /?rest_route=/batch/v1&_w2s=7b72d018 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
213.209.159.133 - - [02/Sep/2026:08:11:12 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
35.230.9.16 - - [02/Sep/2026:08:16:43 -0700] "GET /.git/config HTTP/1.1" 404 12085 "-" "-"
198.235.24.231 - - [02/Sep/2026:08:22:04 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "POST /?rest_route=/batch/v1&_w2s=c8c83483 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:08:22:42 -0700] "POST /?rest_route=/batch/v1&_w2s=3574bca5 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
205.210.31.204 - - [02/Sep/2026:08:23:00 -0700] "GET /xmlrpc.php HTTP/1.1" 405 42 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
205.210.31.172 - - [02/Sep/2026:08:23:22 -0700] "GET /wp-json/wp/v2/users HTTP/1.1" 200 788 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
182.176.132.246 - - [02/Sep/2026:08:28:05 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "POST /?rest_route=/batch/v1&_w2s=0b7bcd5c HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:08:58:42 -0700] "POST /?rest_route=/batch/v1&_w2s=50ebd1fa HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "POST /?rest_route=/batch/v1&_w2s=8a57286e HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
44.203.85.79 - - [02/Sep/2026:09:11:08 -0700] "POST /?rest_route=/batch/v1&_w2s=00d41dde HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
167.94.146.61 - - [02/Sep/2026:09:39:02 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.94.146.61 - - [02/Sep/2026:09:39:05 -0700] "GET /favicon.ico HTTP/1.1" 200 12586 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
184.193.16.189 - - [02/Sep/2026:10:33:51 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:10:33:51 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:10:33:52 -0700] "POST /?rest_route=/batch/v1&_w2s=dcd0df38 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
184.193.16.189 - - [02/Sep/2026:10:33:53 -0700] "POST /?rest_route=/batch/v1&_w2s=d3d25339 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "POST /?rest_route=/batch/v1&_w2s=f3820a04 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
165.232.84.100 - - [02/Sep/2026:10:57:47 -0700] "POST /?rest_route=/batch/v1&_w2s=3f293f75 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
138.197.191.87 - - [02/Sep/2026:11:03:43 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:44 -0700] "GET /console/ HTTP/1.1" 404 12082 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:46 -0700] "GET /server HTTP/1.1" 404 12080 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:48 -0700] "GET /server-status HTTP/1.1" 404 12087 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:50 -0700] "GET /about HTTP/1.1" 200 12582 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:51 -0700] "GET /login.action HTTP/1.1" 404 12086 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:53 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:54 -0700] "GET /___proxy_subdomain_whm/login HTTP/1.1" 401 12514 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:55 -0700] "POST /___proxy_subdomain_whm/login/?login_only=1 HTTP/1.1" 401 38 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:56 -0700] "GET /___proxy_subdomain_whm HTTP/1.1" 307 102 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:57 -0700] "GET /___proxy_subdomain_whm/scripts2/listaccts HTTP/1.1" 200 12527 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:03:58 -0700] "GET /v2/_catalog HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:00 -0700] "GET /.DS_Store HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:02 -0700] "GET /.env HTTP/1.1" 404 12078 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:05 -0700] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 12149 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:08 -0700] "GET /.git/config HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:10 -0700] "POST /graphql HTTP/1.1" 404 12081 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:12 -0700] "POST /api HTTP/1.1" 404 12077 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:13 -0700] "POST /api/graphql HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:15 -0700] "POST /graphql/api HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:16 -0700] "POST /api/gql HTTP/1.1" 404 12081 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:18 -0700] "GET /s/7373e2030323e2133323e2337313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 12174 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:20 -0700] "GET /config.json HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:22 -0700] "GET /telescope/requests HTTP/1.1" 404 12092 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:24 -0700] "GET /info.php HTTP/1.1" 404 12082 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:26 -0700] "GET /.well-known/security.txt HTTP/1.1" 404 12098 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:27 -0700] "GET /actuator/env HTTP/1.1" 404 12086 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:29 -0700] "GET /trace.axd HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:31 -0700] "GET /@vite/env HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:33 -0700] "GET /.vscode/sftp.json HTTP/1.1" 404 12091 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:35 -0700] "OPTIONS / HTTP/1.1" 200 12074 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:37 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:39 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:41 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:43 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:44 -0700] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 788 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
138.197.191.87 - - [02/Sep/2026:11:04:46 -0700] "GET /debug/default/view?panel=config HTTP/1.1" 404 12105 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)"
198.235.24.172 - - [02/Sep/2026:11:11:02 -0700] "GET / HTTP/1.1" 200 12578 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
74.7.244.63 - - [02/Sep/2026:11:58:41 -0700] "GET /robots.txt HTTP/2.0" 200 12585 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
40.81.232.68 - - [02/Sep/2026:12:54:38 -0700] "GET /wp-admin/network/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
40.81.232.68 - - [02/Sep/2026:12:54:52 -0700] "GET /wp-admin/user/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
74.7.228.35 - - [02/Sep/2026:13:12:15 -0700] "GET /robots.txt HTTP/2.0" 200 12585 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
74.7.242.46 - - [02/Sep/2026:13:12:15 -0700] "GET / HTTP/2.0" 200 12578 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "POST /?rest_route=/batch/v1&_w2s=109e626d HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:13:56:15 -0700] "POST /?rest_route=/batch/v1&_w2s=1f702b49 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "POST /?rest_route=/batch/v1&_w2s=45d1deed HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
52.3.227.167 - - [02/Sep/2026:15:49:40 -0700] "POST /?rest_route=/batch/v1&_w2s=77c8ae6b HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
134.199.218.54 - - [02/Sep/2026:16:18:26 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "POST /?rest_route=/batch/v1&_w2s=9b3eac37 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
54.175.205.73 - - [02/Sep/2026:18:33:11 -0700] "POST /?rest_route=/batch/v1&_w2s=ba6017be HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
34.16.127.79 - - [02/Sep/2026:21:45:14 -0700] "GET /.env HTTP/2.0" 404 12078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "POST /?rest_route=/batch/v1&_w2s=afee7c36 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:22:21:23 -0700] "POST /?rest_route=/batch/v1&_w2s=d2326677 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
192.250.235.185 - - [02/Sep/2026:23:17:26 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
192.250.235.185 - - [02/Sep/2026:23:17:28 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:23:35:52 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "POST /?rest_route=/batch/v1&_w2s=f7927de1 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "POST /?rest_route=/batch/v1&_w2s=5410139f HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
39.194.1.210 - - [03/Sep/2026:00:26:09 -0700] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 404 12108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
39.194.1.210 - - [03/Sep/2026:00:26:11 -0700] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 12106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
51.107.1.72 - - [03/Sep/2026:00:42:22 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
51.107.1.72 - - [03/Sep/2026:00:42:23 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
66.116.199.98 - - [03/Sep/2026:00:44:13 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
66.116.199.98 - - [03/Sep/2026:00:44:14 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47.86.33.52 - - [03/Sep/2026:00:58:09 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47.86.33.52 - - [03/Sep/2026:00:58:10 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "POST /?rest_route=/batch/v1&_w2s=eaafa4d6 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
44.214.139.176 - - [03/Sep/2026:01:03:59 -0700] "POST /?rest_route=/batch/v1&_w2s=d14307eb HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
117.0.21.154 - - [03/Sep/2026:01:40:43 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
117.0.21.154 - - [03/Sep/2026:01:40:45 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
5.241.4.185 - - [03/Sep/2026:01:53:48 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
168.107.89.182 - - [03/Sep/2026:01:58:27 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Mozilla/5.0"
168.107.89.182 - - [03/Sep/2026:01:58:28 -0700] "GET /?author=1 HTTP/1.1" 200 12083 "-" "Mozilla/5.0"
168.107.89.182 - - [03/Sep/2026:01:58:29 -0700] "GET /?feed=rss2 HTTP/1.1" 301 - "-" "Mozilla/5.0"
168.107.89.182 - - [03/Sep/2026:01:58:30 -0700] "GET /feed/ HTTP/1.1" 200 35347 "-" "Mozilla/5.0"

195.178.110.66 - - [02/Sep/2026:05:24:11 -0700] "GET /api/session/properties HTTP/1.1" 404 12096 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 37.186.221.181 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-sitemap-users-1.xml HTTP/2.0" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 129.121.76.191 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug,locale HTTP/2.0" 200 26 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 143.95.158.36 - - [02/Sep/2026:05:31:54 -0700] "GET /wp-json/wp/v2/users/me HTTP/2.0" 401 96 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 217.64.102.75 - - [02/Sep/2026:05:31:55 -0700] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug HTTP/2.0" 200 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.16.218.67 - - [02/Sep/2026:05:31:53 -0700] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug HTTP/2.0" 200 26 "https://vaultcryptocurrency.altereddigital.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.87.143.111 - - [02/Sep/2026:05:31:59 -0700] "POST /api/graphql HTTP/2.0" 404 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 72.167.132.114 - - [02/Sep/2026:05:31:59 -0700] "GET /?author=1 HTTP/2.0" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 103.74.116.219 - - [02/Sep/2026:05:32:08 -0700] "GET /wp-json/ldlms/v2/users HTTP/2.0" 404 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 217.64.102.75 - - [02/Sep/2026:05:32:20 -0700] "GET /wp-json/wp/v2/users?capabilities=manage_options&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 167.172.113.95 - - [02/Sep/2026:05:32:34 -0700] "GET /wp-json/wp/v2/users?capabilities=publish_posts&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 37.186.221.181 - - [02/Sep/2026:05:32:39 -0700] "GET /wp-json/wp/v2/users?capabilities=edit_posts&per_page=100&_fields=slug HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.163.176.25 - - [02/Sep/2026:05:32:50 -0700] "GET /wp-json/wp/v2/users?who=authors&per_page=100&_fields=slug,id HTTP/2.0" 401 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 66.132.172.142 - - [02/Sep/2026:05:38:08 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.172.142 - - [02/Sep/2026:05:38:11 -0700] "GET /favicon.ico HTTP/1.1" 200 12585 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 71.6.134.234 - - [02/Sep/2026:06:16:50 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 146.59.80.51 - - [02/Sep/2026:06:24:40 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 146.59.80.51 - - [02/Sep/2026:06:24:42 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 51.89.83.146 - - [02/Sep/2026:07:23:02 -0700] "GET /accesson.php HTTP/2.0" 404 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 51.89.83.146 - - [02/Sep/2026:07:23:03 -0700] "GET /wp-content/plugins/background-image-cropper/background-image-cropper.js HTTP/2.0" 404 12145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 51.89.83.146 - - [02/Sep/2026:07:23:18 -0700] "GET /wp-content/plugins/cidaas-pro-master/composer.json HTTP/2.0" 404 12124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:07:52:19 -0700] "POST /?rest_route=/batch/v1&_w2s=7b72d018 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 213.209.159.133 - - [02/Sep/2026:08:11:12 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 35.230.9.16 - - [02/Sep/2026:08:16:43 -0700] "GET /.git/config HTTP/1.1" 404 12085 "-" "-" 198.235.24.231 - - [02/Sep/2026:08:22:04 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:08:22:41 -0700] "POST /?rest_route=/batch/v1&_w2s=c8c83483 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:08:22:42 -0700] "POST /?rest_route=/batch/v1&_w2s=3574bca5 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 205.210.31.204 - - [02/Sep/2026:08:23:00 -0700] "GET /xmlrpc.php HTTP/1.1" 405 42 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 205.210.31.172 - - [02/Sep/2026:08:23:22 -0700] "GET /wp-json/wp/v2/users HTTP/1.1" 200 788 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 182.176.132.246 - - [02/Sep/2026:08:28:05 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:08:58:40 -0700] "POST /?rest_route=/batch/v1&_w2s=0b7bcd5c HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:08:58:42 -0700] "POST /?rest_route=/batch/v1&_w2s=50ebd1fa HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:09:11:07 -0700] "POST /?rest_route=/batch/v1&_w2s=8a57286e HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 44.203.85.79 - - [02/Sep/2026:09:11:08 -0700] "POST /?rest_route=/batch/v1&_w2s=00d41dde HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 167.94.146.61 - - [02/Sep/2026:09:39:02 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.146.61 - - [02/Sep/2026:09:39:05 -0700] "GET /favicon.ico HTTP/1.1" 200 12586 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 184.193.16.189 - - [02/Sep/2026:10:33:51 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:10:33:51 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:10:33:52 -0700] "POST /?rest_route=/batch/v1&_w2s=dcd0df38 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 184.193.16.189 - - [02/Sep/2026:10:33:53 -0700] "POST /?rest_route=/batch/v1&_w2s=d3d25339 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:10:57:45 -0700] "POST /?rest_route=/batch/v1&_w2s=f3820a04 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 165.232.84.100 - - [02/Sep/2026:10:57:47 -0700] "POST /?rest_route=/batch/v1&_w2s=3f293f75 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 138.197.191.87 - - [02/Sep/2026:11:03:43 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:44 -0700] "GET /console/ HTTP/1.1" 404 12082 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:46 -0700] "GET /server HTTP/1.1" 404 12080 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:48 -0700] "GET /server-status HTTP/1.1" 404 12087 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:50 -0700] "GET /about HTTP/1.1" 200 12582 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:51 -0700] "GET /login.action HTTP/1.1" 404 12086 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:53 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:54 -0700] "GET /___proxy_subdomain_whm/login HTTP/1.1" 401 12514 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:55 -0700] "POST /___proxy_subdomain_whm/login/?login_only=1 HTTP/1.1" 401 38 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:56 -0700] "GET /___proxy_subdomain_whm HTTP/1.1" 307 102 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:57 -0700] "GET /___proxy_subdomain_whm/scripts2/listaccts HTTP/1.1" 200 12527 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:03:58 -0700] "GET /v2/_catalog HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:00 -0700] "GET /.DS_Store HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:02 -0700] "GET /.env HTTP/1.1" 404 12078 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:05 -0700] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 12149 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:08 -0700] "GET /.git/config HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:10 -0700] "POST /graphql HTTP/1.1" 404 12081 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:12 -0700] "POST /api HTTP/1.1" 404 12077 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:13 -0700] "POST /api/graphql HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:15 -0700] "POST /graphql/api HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:16 -0700] "POST /api/gql HTTP/1.1" 404 12081 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:18 -0700] "GET /s/7373e2030323e2133323e2337313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 12174 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:20 -0700] "GET /config.json HTTP/1.1" 404 12085 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:22 -0700] "GET /telescope/requests HTTP/1.1" 404 12092 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:24 -0700] "GET /info.php HTTP/1.1" 404 12082 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:26 -0700] "GET /.well-known/security.txt HTTP/1.1" 404 12098 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:27 -0700] "GET /actuator/env HTTP/1.1" 404 12086 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:29 -0700] "GET /trace.axd HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:31 -0700] "GET /@vite/env HTTP/1.1" 404 12083 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:33 -0700] "GET /.vscode/sftp.json HTTP/1.1" 404 12091 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:35 -0700] "OPTIONS / HTTP/1.1" 200 12074 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:37 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:39 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:41 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:43 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 207 628 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:44 -0700] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 788 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 138.197.191.87 - - [02/Sep/2026:11:04:46 -0700] "GET /debug/default/view?panel=config HTTP/1.1" 404 12105 "-" "Mozilla/5.0 (l9scan/2.0.7373e2030323e2133323e2337313; +https://leakix.net)" 198.235.24.172 - - [02/Sep/2026:11:11:02 -0700] "GET / HTTP/1.1" 200 12578 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 74.7.244.63 - - [02/Sep/2026:11:58:41 -0700] "GET /robots.txt HTTP/2.0" 200 12585 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 40.81.232.68 - - [02/Sep/2026:12:54:38 -0700] "GET /wp-admin/network/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 40.81.232.68 - - [02/Sep/2026:12:54:52 -0700] "GET /wp-admin/user/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 74.7.228.35 - - [02/Sep/2026:13:12:15 -0700] "GET /robots.txt HTTP/2.0" 200 12585 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.242.46 - - [02/Sep/2026:13:12:15 -0700] "GET / HTTP/2.0" 200 12578 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:13:56:14 -0700] "POST /?rest_route=/batch/v1&_w2s=109e626d HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:13:56:15 -0700] "POST /?rest_route=/batch/v1&_w2s=1f702b49 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:15:49:38 -0700] "POST /?rest_route=/batch/v1&_w2s=45d1deed HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 52.3.227.167 - - [02/Sep/2026:15:49:40 -0700] "POST /?rest_route=/batch/v1&_w2s=77c8ae6b HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 134.199.218.54 - - [02/Sep/2026:16:18:26 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 54.175.205.73 - - [02/Sep/2026:18:33:09 -0700] "POST /?rest_route=/batch/v1&_w2s=9b3eac37 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.175.205.73 - - [02/Sep/2026:18:33:11 -0700] "POST /?rest_route=/batch/v1&_w2s=ba6017be HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 34.16.127.79 - - [02/Sep/2026:21:45:14 -0700] "GET /.env HTTP/2.0" 404 12078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "GET / HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:22:21:21 -0700] "POST /?rest_route=/batch/v1&_w2s=afee7c36 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:22:21:23 -0700] "POST /?rest_route=/batch/v1&_w2s=d2326677 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.250.235.185 - - [02/Sep/2026:23:17:26 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.250.235.185 - - [02/Sep/2026:23:17:28 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:23:35:52 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "POST /?rest_route=/batch/v1&_w2s=f7927de1 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 188.166.68.82 - - [02/Sep/2026:23:35:53 -0700] "POST /?rest_route=/batch/v1&_w2s=5410139f HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 39.194.1.210 - - [03/Sep/2026:00:26:09 -0700] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 404 12108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 39.194.1.210 - - [03/Sep/2026:00:26:11 -0700] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 12106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 51.107.1.72 - - [03/Sep/2026:00:42:22 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 51.107.1.72 - - [03/Sep/2026:00:42:23 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 66.116.199.98 - - [03/Sep/2026:00:44:13 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 66.116.199.98 - - [03/Sep/2026:00:44:14 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 47.86.33.52 - - [03/Sep/2026:00:58:09 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 47.86.33.52 - - [03/Sep/2026:00:58:10 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "GET / HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "GET /readme.html HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 44.214.139.176 - - [03/Sep/2026:01:03:58 -0700] "POST /?rest_route=/batch/v1&_w2s=eaafa4d6 HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 44.214.139.176 - - [03/Sep/2026:01:03:59 -0700] "POST /?rest_route=/batch/v1&_w2s=d14307eb HTTP/1.1" 207 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 117.0.21.154 - - [03/Sep/2026:01:40:43 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 117.0.21.154 - - [03/Sep/2026:01:40:45 -0700] "POST /wp-login.php HTTP/2.0" 200 7893 "https://vaultcryptocurrency.altereddigital.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 5.241.4.185 - - [03/Sep/2026:01:53:48 -0700] "GET /wp-login.php HTTP/2.0" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 168.107.89.182 - - [03/Sep/2026:01:58:27 -0700] "GET /wp-login.php HTTP/1.1" 200 7442 "-" "Mozilla/5.0" 168.107.89.182 - - [03/Sep/2026:01:58:28 -0700] "GET /?author=1 HTTP/1.1" 200 12083 "-" "Mozilla/5.0" 168.107.89.182 - - [03/Sep/2026:01:58:29 -0700] "GET /?feed=rss2 HTTP/1.1" 301 - "-" "Mozilla/5.0" 168.107.89.182 - - [03/Sep/2026:01:58:30 -0700] "GET /feed/ HTTP/1.1" 200 35347 "-" "Mozilla/5.0"