­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:27 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:28 +0000] "HEAD / HTTP/1.1" 200 - "http://khalidcrm.core3.agency" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:28 +0000] "GET / HTTP/1.1" 200 395 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:28 +0000] "GET /.git/HEAD HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:28 +0000] "GET /gif.php HTTP/1.1" 200 25 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:29 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:29 +0000] "GET /admin.php HTTP/1.1" 200 3518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:29 +0000] "GET /env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:29 +0000] "GET /.env.local HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:29 +0000] "GET /.env.production HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /.env.development HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /backend/.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /api/.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /config.json HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /.aws/credentials HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /.git/config HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /js/config.js HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /?C=N;O=D HTTP/1.1" 200 393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /?C=M;O=A HTTP/1.1" 200 395 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /?C=S;O=A HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /?C=D;O=A HTTP/1.1" 200 395 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:30 +0000] "GET /admin.php(11)%20:%20eval() HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /?C=N;O=A HTTP/1.1" 200 395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwkhalidcrmFwcore3FwagencyCwFwwell-known HTTP/1.1" 200 3302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?view=.info.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 55 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /?C=S;O=D HTTP/1.1" 200 393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /?C=D;O=D HTTP/1.1" 200 393 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php? HTTP/1.1" 200 3518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?dir=Cwhome HTTP/1.1" 200 3645 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?dir=CwhomeCwbalubaid HTTP/1.1" 200 7717 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?edit=admin.php%2811%29+%3A+eval%28%29%27d+code&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?edit=gif.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 2615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:31 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 3518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?edit=admin.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 10167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?edit=.info.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 2491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?view=error_log&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 1917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?view=admin.php%2811%29+%3A+eval%28%29%27d+code&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /?C=M;O=D HTTP/1.1" 200 391 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?view=gif.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 204 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?view=admin.php&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?edit=error_log&dir=CwhomeCwbalubaidCwkhalidcrmFwcore3Fwagency HTTP/1.1" 200 4456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?dir=CwhomeCwFwcpanm HTTP/1.1" 200 3269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?view=latest&dir=Cwhome HTTP/1.1" 200 38686 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?dir=CwhomeCwFwcpan HTTP/1.1" 200 2915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwjbm HTTP/1.1" 200 3318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:32 +0000] "GET /admin.php?edit=latest&dir=Cwhome HTTP/1.1" 200 2437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwFwcpcpan HTTP/1.1" 200 2917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwFwrapid-scan-db HTTP/1.1" 200 2921 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwcache HTTP/1.1" 200 3320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwcPanelInstall HTTP/1.1" 200 2920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwcagefs HTTP/1.1" 200 3388 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwvirtfs HTTP/1.1" 200 2914 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwtransfer HTTP/1.1" 200 3256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwcaldav HTTP/1.1" 200 3521 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwclwpos HTTP/1.1" 200 3321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwWHGIFwNET HTTP/1.1" 200 2924 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?dir=CwhomeCwbalubaidCwFwclFwselector HTTP/1.1" 200 3453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 2a02:4780:f:1b56::1 - - [28/May/2026:12:08:33 +0000] "GET /admin.php?view=0_README_BEFORE_DELETING_VIRTFS&dir=Cwhome HTTP/1.1" 200 334 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 13.235.49.188 - - [28/May/2026:13:30:38 +0000] "GET / HTTP/1.1" 200 395 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:39 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:39 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:40 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:40 +0000] "GET /.git/config HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:41 +0000] "GET /.git-credentials HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:41 +0000] "GET /.git/credentials HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:42 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:43 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:43 +0000] "GET /.env.local HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.49.188 - - [28/May/2026:13:30:43 +0000] "GET /.env.production HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"