| 2026-09-02 07:23:28 |
35.255.199.143 |
152.67.76.29 |
GET |
/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:28 |
35.255.199.143 |
152.67.76.29 |
GET |
/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:29 |
35.255.199.143 |
152.67.76.29 |
GET |
/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:29 |
35.255.199.143 |
152.67.76.29 |
GET |
/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:30 |
35.255.199.143 |
152.67.76.29 |
GET |
/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:30 |
35.255.199.143 |
152.67.76.29 |
GET |
/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:31 |
35.255.199.143 |
152.67.76.29 |
GET |
/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:31 |
35.255.199.143 |
152.67.76.29 |
GET |
/index.php |
s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello |
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:31 |
35.255.199.143 |
152.67.76.29 |
GET |
/public/index.php |
s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello |
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:32 |
35.255.199.143 |
152.67.76.29 |
GET |
/index.php |
lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"));?>+/tmp/index1.php |
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:32 |
35.255.199.143 |
152.67.76.29 |
GET |
/index.php |
lang=../../../../../../../../tmp/index1 |
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:23:32 |
35.255.199.143 |
152.67.76.29 |
GET |
/containers/json |
|
HTTP/1.1 |
404 |
162 |
Council Bluffs |
US |
libredtail-http |
| 2026-09-02 07:25:08 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=103&page_size=50 |
HTTP/2.0 |
200 |
3843 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 07:29:36 |
172.71.148.156 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/1.1 |
301 |
178 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-09-02 07:29:36 |
172.71.148.157 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/2.0 |
404 |
123 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-09-02 07:46:02 |
103.166.245.186 |
rgifo.lol |
POST |
/xmlrpc.php |
|
HTTP/1.1 |
404 |
162 |
Thrissur |
IN |
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/61.0.0.0 Safari/537.36 |
| 2026-09-02 07:50:20 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=143 |
HTTP/2.0 |
200 |
3843 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 07:52:23 |
136.70.95.238 |
rgifo.lol |
GET |
/backend/.git/config |
|
HTTP/1.1 |
404 |
162 |
|
US |
crusader-worker/1.0 |
| 2026-09-02 07:52:23 |
136.70.95.238 |
rgifo.lol |
GET |
/www/.git/config |
|
HTTP/1.1 |
404 |
162 |
|
US |
crusader-worker/1.0 |
| 2026-09-02 07:52:23 |
136.70.95.238 |
rgifo.lol |
GET |
/var/www/.git/config |
|
HTTP/1.1 |
404 |
162 |
|
US |
crusader-worker/1.0 |
| 2026-09-02 07:52:23 |
136.70.95.238 |
rgifo.lol |
GET |
/app/.git/config |
|
HTTP/1.1 |
301 |
178 |
|
US |
crusader-worker/1.0 |
| 2026-09-02 07:52:23 |
136.70.95.238 |
rgifo.lol |
GET |
/www/.git/config |
|
HTTP/1.1 |
301 |
178 |
|
US |
crusader-worker/1.0 |
| 2026-09-02 07:55:08 |
78.153.140.43 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-09-02 07:55:09 |
78.153.140.43 |
152.67.76.29 |
POST |
/index.html |
|
HTTP/1.1 |
405 |
568 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-09-02 08:11:54 |
216.73.216.74 |
log.rgifo.lol |
GET |
/robots.txt |
|
HTTP/2.0 |
404 |
19 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:11:54 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=108&page_size=100 |
HTTP/2.0 |
200 |
4697 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:12:32 |
18.205.199.5 |
rgifo.lol |
GET |
/robots.txt |
|
HTTP/1.1 |
404 |
134 |
Ashburn |
US |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) |
| 2026-09-02 08:15:20 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=107&page_size=500 |
HTTP/2.0 |
200 |
13588 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:15:45 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=70&page_size=250 |
HTTP/2.0 |
200 |
8914 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:15:53 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=107&page_size=25 |
HTTP/2.0 |
200 |
3254 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:19:06 |
78.153.140.39 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-09-02 08:19:06 |
78.153.140.39 |
152.67.76.29 |
POST |
/ |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-09-02 08:21:55 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=104&page_size=50 |
HTTP/2.0 |
200 |
3716 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:25:27 |
192.99.32.10 |
rgifo.lol |
GET |
/index.php |
rest_route=/wp/v2/users |
HTTP/2.0 |
404 |
123 |
|
CA |
Mozilla/5.0 zgrab/0.x |
| 2026-09-02 08:37:13 |
195.178.110.62 |
rgifo.lol |
GET |
/api/session/properties |
|
HTTP/1.1 |
301 |
178 |
|
BG |
metabase-cve-2026-72898-detect/1.0 (benign detection probes only) |
| 2026-09-02 08:37:13 |
195.178.110.62 |
rgifo.lol |
GET |
/api/session/properties |
|
HTTP/1.1 |
404 |
134 |
|
BG |
metabase-cve-2026-72898-detect/1.0 (benign detection probes only) |
| 2026-09-02 08:37:13 |
195.178.110.62 |
rgifo.lol |
GET |
/api/session/properties |
|
HTTP/1.1 |
404 |
134 |
|
BG |
metabase-cve-2026-72898-detect/1.0 (benign detection probes only) |
| 2026-09-02 08:44:14 |
44.215.105.197 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Ashburn |
US |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 |
| 2026-09-02 08:47:08 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=144 |
HTTP/2.0 |
200 |
3510 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 08:47:54 |
176.65.149.236 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
400 |
264 |
Eygelshoven |
NL |
Mozilla/5.0 zgrab/0.x |
| 2026-09-02 08:57:50 |
195.184.76.251 |
mail.rgifo.lol |
GET |
/installer/index.php |
|
HTTP/1.1 |
404 |
162 |
Warrenton |
US |
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 |
| 2026-09-02 08:59:28 |
103.213.112.120 |
rgifo.lol |
GET |
/boaform/admin/formLogin |
username=adminisp&psd=adminisp |
HTTP/1.0 |
301 |
178 |
|
PK |
|
| 2026-09-02 09:02:50 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=108&page_size=25 |
HTTP/2.0 |
200 |
3308 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 09:03:59 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=109&page_size=100 |
HTTP/2.0 |
200 |
4520 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 09:03:59 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=108&page_size=500 |
HTTP/2.0 |
200 |
9899 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 09:04:44 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=105&page_size=50 |
HTTP/2.0 |
200 |
3716 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 09:05:00 |
216.73.216.74 |
log.rgifo.lol |
GET |
/query |
page=71&page_size=250 |
HTTP/2.0 |
200 |
7906 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-02 09:06:47 |
104.23.217.77 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/1.1 |
301 |
178 |
Stockholm |
SE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-09-02 09:06:47 |
104.23.217.76 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/2.0 |
404 |
123 |
Stockholm |
SE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-09-02 09:10:21 |
147.185.132.225 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
US |
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity |