GhostManSec
Server: LiteSpeed
System: Linux premium197.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: parhudrw (1725)
PHP: 7.4.33
Disabled: NONE
$ pwd: /proc/self/root/proc/thread-self/root/home/parhudrw/access-logs/
Upload Files
File: //proc/self/root/proc/thread-self/root/home/parhudrw/access-logs/asadali.saifookhan.com-ssl_log
20.238.42.79 - - [08/Apr/2026:01:48:15 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:16 -0400] "GET /green.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:16 -0400] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:16 -0400] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:16 -0400] "GET /zoper1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /file61.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /term.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /a7.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /tx78.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:17 -0400] "GET /wmore1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:18 -0400] "GET /dass.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:18 -0400] "GET /lib.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:18 -0400] "GET /wp9.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:18 -0400] "GET /pass4.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:18 -0400] "GET /bgymj.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /8573.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /torsa1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /wp-good.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /gfd.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /asasx.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:19 -0400] "GET /gptsh.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /666.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /ws86.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /byypas.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /wp-the.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:20 -0400] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:21 -0400] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:21 -0400] "GET /bless.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:21 -0400] "GET /bolt.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:21 -0400] "GET /wp5.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:22 -0400] "GET //wp.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:22 -0400] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:22 -0400] "GET /CDX1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:22 -0400] "GET /ta0ol.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:22 -0400] "GET /jp.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:23 -0400] "GET /tx79.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:23 -0400] "GET /Sanskrit.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:23 -0400] "GET /Ov-Simple1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:23 -0400] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:23 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:24 -0400] "GET /classwithtostring.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:24 -0400] "GET /ws88.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:24 -0400] "GET /a5.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:24 -0400] "GET /ws.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:24 -0400] "GET /rithin.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET //nw.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET /motu.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET /amax.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET /gifclass.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:25 -0400] "GET /ws85.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:26 -0400] "GET /ws87.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:26 -0400] "GET /ortasekerli1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:26 -0400] "GET /new3.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:26 -0400] "GET /sid3.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:26 -0400] "GET /wp-png.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:27 -0400] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:27 -0400] "GET /kj.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:27 -0400] "GET /b4txckoieeyhynhsrpi9lCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:27 -0400] "GET /CDX2.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:28 -0400] "GET /wziar1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:28 -0400] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:28 -0400] "GET /sadcut1.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:28 -0400] "GET /8daf1238_1774208172.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:28 -0400] "GET /xsas.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /a4.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /jga.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /buc.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /Cap.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /jlex.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:29 -0400] "GET /gpt-sh.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /tfm.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /uuu.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /hhxc.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /0yellow.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /only.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:30 -0400] "GET /aligk.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /wtiiy.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /wp.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /myfile.php HTTP/1.1" 500 1092 "-" "-"
20.238.42.79 - - [08/Apr/2026:01:48:31 -0400] "GET /xwx1.php HTTP/1.1" 500 1092 "-" "-"
195.3.220.88 - - [08/Apr/2026:03:57:35 -0400] "GET /buy.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:35 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:36 -0400] "GET /wp-content/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:36 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:37 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:37 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:37 -0400] "GET /worksec.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:37 -0400] "GET /wp-content/worksec.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:37 -0400] "GET /wp-content/themes/twentynineteen/404.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:38 -0400] "GET /wp-content/themes/twentytwentyone/404.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:38 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:38 -0400] "GET /wp-content/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:39 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:39 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:39 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:40 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:40 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:40 -0400] "GET /wp-admin/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:40 -0400] "GET /wp-content/themes/Divi/404.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:41 -0400] "GET /wp-admin/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:41 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:41 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:41 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:41 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:42 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:42 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
195.3.220.88 - - [08/Apr/2026:03:57:42 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
205.210.31.36 - - [08/Apr/2026:06:30:18 -0400] "GET / HTTP/1.1" 503 856 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
34.86.138.229 - - [08/Apr/2026:08:37:24 -0400] "GET / HTTP/1.1" 503 856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
103.153.183.69 - - [08/Apr/2026:09:23:46 -0400] "GET / HTTP/1.1" 503 856 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
157.245.142.166 - - [08/Apr/2026:10:12:43 -0400] "GET / HTTP/1.1" 503 856 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
157.245.142.166 - - [08/Apr/2026:10:12:43 -0400] "GET /favicon.ico HTTP/1.1" 500 1092 "https://asadali.saifookhan.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
66.249.73.14 - - [08/Apr/2026:12:32:11 -0400] "GET /robots.txt HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.15 - - [08/Apr/2026:12:32:12 -0400] "GET /favicon.ico HTTP/1.1" 500 1092 "-" "Googlebot-Image/1.0"
66.249.73.1 - - [08/Apr/2026:12:32:13 -0400] "GET /favicon.ico HTTP/1.1" 500 1092 "-" "Googlebot-Image/1.0"
159.65.18.197 - - [08/Apr/2026:14:26:27 -0400] "GET / HTTP/1.1" 503 856 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:28 -0400] "GET /console/ HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:29 -0400] "GET /server HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:32 -0400] "GET /about HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:33 -0400] "GET /login.action HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:34 -0400] "GET /v2/_catalog HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:35 -0400] "GET /.DS_Store HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:36 -0400] "GET /.env HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:38 -0400] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:39 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:40 -0400] "POST /graphql HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:41 -0400] "POST /api HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:41 -0400] "POST /api/graphql HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:41 -0400] "POST /graphql/api HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:41 -0400] "POST /api/gql HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:42 -0400] "GET /s/633323e2634313e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:43 -0400] "GET /config.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:45 -0400] "GET /telescope/requests HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:45 -0400] "GET /info.php HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:46 -0400] "GET /.well-known/security.txt HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:47 -0400] "GET /actuator/env HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:49 -0400] "GET /swagger-ui.html HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:50 -0400] "GET /swagger/index.html HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:51 -0400] "GET /swagger/swagger-ui.html HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:52 -0400] "GET /webjars/swagger-ui/index.html HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:53 -0400] "GET /swagger.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:54 -0400] "GET /swagger/v1/swagger.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:55 -0400] "GET /v2/api-docs HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:56 -0400] "GET /v3/api-docs HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:57 -0400] "GET /api-docs/swagger.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:58 -0400] "GET /api/swagger.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:26:59 -0400] "GET /trace.axd HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:27:00 -0400] "GET /@vite/env HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:27:01 -0400] "GET /.vscode/sftp.json HTTP/1.1" 500 1092 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:27:02 -0400] "OPTIONS / HTTP/1.1" 503 856 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:27:03 -0400] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 503 856 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
159.65.18.197 - - [08/Apr/2026:14:27:04 -0400] "GET /debug/default/view?panel=config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (l9scan/2.0.633323e2634313e27363e2237313; +https://leakix.net)"
@ Telegram