MOON
Server: Apache
System: Linux vps.erhabenn.com.br 3.10.0-1160.119.1.el7.tuxcare.els2.x86_64 #1 SMP Mon Jul 15 12:09:18 UTC 2024 x86_64
User: machen (1008)
PHP: 8.2.31
Disabled: NONE
$ pwd: /disk001/machen/access-logs/
Upload Files
File: /disk001/machen/access-logs/fl.machen.ai-ssl_log
195.96.139.66 - - [13/Nov/2026:12:04:11 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
205.210.31.4 - - [13/Nov/2026:13:43:45 -0300] "GET / HTTP/1.1" 200 1357 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
45.115.26.203 - - [13/Nov/2026:16:52:12 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /src/.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.bak HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /%2f%2eenv HTTP/1.1" 404 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.swp HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /%2fbackend%2f%2eenv HTTP/1.1" 404 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.local HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /_phpinfo.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /debug/vars HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.npmrc HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /app/.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /%2f%2eaws%2fcredentials HTTP/1.1" 404 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.backup HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /php-info.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /info.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env~ HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /backend/.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.docker/config.json HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /php_info.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /i.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.git-credentials HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /phpinfo.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /%2eenv HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.stage HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /actuator/configprops HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.old HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.netrc HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.aws/config HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.development HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /test.php HTTP/1.1" 200 1350 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.git/config HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /api/.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /pi.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /server-status HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.dev HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.save HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.production HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.pypirc HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.kube/config HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.staging HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /actuator/env HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [13/Nov/2026:16:52:26 -0300] "GET /.env.prod HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
102.220.161.89 - - [13/Nov/2026:18:00:24 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
66.63.168.104 - - [13/Nov/2026:18:00:24 -0300] "GET /.well-known/security.txt HTTP/1.1" 200 1357 "-" "security-txt-discovery/0.1.0-rust"
5.78.29.65 - - [13/Nov/2026:18:00:25 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
81.171.72.135 - - [13/Nov/2026:18:00:28 -0300] "POST / HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:27 -0300] "GET / HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:28 -0300] "HEAD / HTTP/1.1" 200 - "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:28 -0300] "GET /storage/logs/laravel.log HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /backup.zip HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /api/.env HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /dump.sql HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /database.sql HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /zzcanary-4b56fa85b182568b HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /actuator/heapdump HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:29 -0300] "GET /.svn/wc.db HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /backup.tar.gz HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /.ssh/id_rsa HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /_vti_pvt/service.pwd HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /.ssh/zzcanary-8bd1007a8bc9cf0 HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /actuator/zzcanary-74bf3b7aef83f522 HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:30 -0300] "GET /wp-admin/setup-config.php HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /.git/HEAD HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /.env HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /wp-admin/zzcanary-51ed0a90b951178b.php HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /server.key HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /user_secrets.yml HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /docker-compose.yml HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:31 -0300] "GET /.env.production HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /phpinfo.php HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /zzcanary-3c3dfb55c5f912cc.yml HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /secrets.json HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /database_backup.sql HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /zzcanary-5de1e7f2744c8ff7.php HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:32 -0300] "GET /.vscode/sftp.json HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /.npmrc HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /backup.sql HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /.vscode/zzcanary-4b7eb45ef3c24bc8.json HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /zzcanary-53af5fc5e193d8ec.json HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /.bash_history HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /wp-config.php HTTP/1.1" 403 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:33 -0300] "GET /config.xml HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:34 -0300] "GET /config.php HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
81.171.72.135 - - [13/Nov/2026:18:00:34 -0300] "GET /zzcanary-52f8aa801dac3036.xml HTTP/1.1" 200 1357 "-" "Go-http-client/1.1"
35.94.246.20 - - [13/Nov/2026:18:00:39 -0300] "GET /robots.txt HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"
35.94.246.20 - - [13/Nov/2026:18:00:40 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"
91.218.50.21 - - [13/Nov/2026:18:00:44 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (compatible; OusanBot/1.0; +https://ousan.io/bot)"
91.218.50.21 - - [13/Nov/2026:18:00:44 -0300] "GET /favicon.ico HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (compatible; OusanBot/1.0; +https://ousan.io/bot)"
104.244.74.39 - - [13/Nov/2026:18:00:49 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:49 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:49 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:50 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:50 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:51 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:51 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:51 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:52 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:52 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:53 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:00:54 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:02:38 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:02:39 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:02:39 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:02:40 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
216.73.216.28 - - [13/Nov/2026:18:02:48 -0300] "GET /robots.txt HTTP/1.1" 200 1357 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.28 - - [13/Nov/2026:18:02:50 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:21 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:21 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:22 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:23 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:26 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:27 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:27 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:28 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:28 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:28 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:29 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:29 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:29 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:30 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:30 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:31 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:39 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:40 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:40 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:41 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
139.59.143.102 - - [13/Nov/2026:18:04:55 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
104.244.74.39 - - [13/Nov/2026:18:04:57 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
139.59.143.102 - - [13/Nov/2026:18:04:57 -0300] "GET /console/ HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
104.244.74.39 - - [13/Nov/2026:18:04:57 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:58 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:04:59 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
139.59.143.102 - - [13/Nov/2026:18:05:00 -0300] "GET /server HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:02 -0300] "GET /server-status HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:05 -0300] "GET /about HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:06 -0300] "GET /login.action HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:08 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:09 -0300] "GET /___proxy_subdomain_whm/login HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:11 -0300] "GET /___proxy_subdomain_cpanel HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:13 -0300] "GET /v2/_catalog HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:14 -0300] "GET /.DS_Store HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:16 -0300] "GET /.env HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:18 -0300] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:20 -0300] "GET /.git/config HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:22 -0300] "POST /graphql HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:24 -0300] "POST /api HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:26 -0300] "POST /api/graphql HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:28 -0300] "POST /graphql/api HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:29 -0300] "POST /api/gql HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:30 -0300] "GET /s/039313e2136313e24383e23313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:32 -0300] "GET /config.json HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:33 -0300] "GET /telescope/requests HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:34 -0300] "GET /info.php HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:36 -0300] "GET /.well-known/security.txt HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:37 -0300] "GET /actuator/env HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:38 -0300] "GET /trace.axd HTTP/1.1" 403 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:39 -0300] "GET /@vite/env HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:40 -0300] "GET /.vscode/sftp.json HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:42 -0300] "OPTIONS / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:43 -0300] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
139.59.143.102 - - [13/Nov/2026:18:05:44 -0300] "GET /debug/default/view?panel=config HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (l9scan/2.0.039313e2136313e24383e23313; +https://leakix.net)"
104.244.74.39 - - [13/Nov/2026:18:06:02 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:06:03 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:06:03 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:06:04 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
169.150.211.202 - - [13/Nov/2026:18:07:06 -0300] "GET / HTTP/1.1" 403 1357 "https://www.fl.machen.ai" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
169.150.211.202 - - [13/Nov/2026:18:07:08 -0300] "GET /favicon.ico HTTP/1.1" 403 1357 "https://www.fl.machen.ai" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
104.244.74.39 - - [13/Nov/2026:18:07:10 -0300] "HEAD /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:07:11 -0300] "HEAD /.env.local HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:07:11 -0300] "HEAD /.env.prod HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
104.244.74.39 - - [13/Nov/2026:18:07:12 -0300] "HEAD /.env.dev HTTP/1.1" 403 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claude-user@anthropic.com)"
205.169.39.6 - - [13/Nov/2026:18:07:23 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36"
205.169.39.6 - - [13/Nov/2026:18:07:37 -0300] "HEAD / HTTP/1.1" 200 - "-" "win10chrome117"
205.169.39.6 - - [13/Nov/2026:18:07:37 -0300] "GET / HTTP/1.1" 200 1357 "-" "win10chrome117"
52.230.100.152 - - [13/Nov/2026:18:08:50 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
91.196.152.221 - - [13/Nov/2026:18:14:29 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
149.50.96.188 - - [13/Nov/2026:18:24:34 -0300] "GET / HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
@ Telegram