| 2026-08-11 01:42:49 |
20.212.82.42 |
rgifo.lol |
GET |
/shell.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/file15.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/file15.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/file30.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/file30.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/bless5.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:50 |
20.212.82.42 |
rgifo.lol |
GET |
/bless5.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/wp-is.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/wp-is.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/hook.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/hook.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/wp-configs.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:51 |
20.212.82.42 |
rgifo.lol |
GET |
/wp-configs.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/mini.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/mini.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/class19.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/class19.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/plss3.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:52 |
20.212.82.42 |
rgifo.lol |
GET |
/plss3.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:53 |
20.212.82.42 |
rgifo.lol |
GET |
/0x.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:53 |
20.212.82.42 |
rgifo.lol |
GET |
/0x.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:53 |
20.212.82.42 |
rgifo.lol |
GET |
/file1.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:53 |
20.212.82.42 |
rgifo.lol |
GET |
/file1.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:53 |
20.212.82.42 |
rgifo.lol |
GET |
/file8.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/file8.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/100.kb.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/100.kb.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/ppp.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/ppp.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:54 |
20.212.82.42 |
rgifo.lol |
GET |
/tox.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/tox.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/bless11.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/bless11.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/030.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/030.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:55 |
20.212.82.42 |
rgifo.lol |
GET |
/v4.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:56 |
20.212.82.42 |
rgifo.lol |
GET |
/v4.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:56 |
20.212.82.42 |
rgifo.lol |
GET |
/xxx.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:56 |
20.212.82.42 |
rgifo.lol |
GET |
/xxx.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:56 |
20.212.82.42 |
rgifo.lol |
GET |
/fs.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:56 |
20.212.82.42 |
rgifo.lol |
GET |
/fs.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/33.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/33.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/v2.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/v2.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/new4.php |
|
HTTP/1.1 |
301 |
178 |
Singapore |
SG |
|
| 2026-08-11 01:42:57 |
20.212.82.42 |
rgifo.lol |
GET |
/new4.php |
|
HTTP/1.1 |
404 |
162 |
Singapore |
SG |
|
| 2026-08-11 01:43:55 |
81.19.216.69 |
152.67.76.29 |
POST |
/onvif/device_service |
|
HTTP/1.1 |
404 |
162 |
Amsterdam |
NL |
Go-http-client/1.1 |
| 2026-08-11 01:43:55 |
193.176.31.152 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 01:43:55 |
193.176.31.245 |
152.67.76.29 |
GET |
/mcp/ |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 01:43:55 |
81.19.216.90 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 01:43:55 |
185.223.235.3 |
152.67.76.29 |
GET |
/sse |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 01:46:11 |
66.132.195.44 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
|
US |
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) |
| 2026-08-11 01:46:13 |
66.132.195.44 |
rgifo.lol |
|
|
|
|
400 |
166 |
|
US |
|
| 2026-08-11 01:46:13 |
66.132.195.44 |
rgifo.lol |
|
|
|
|
400 |
166 |
|
US |
|
| 2026-08-11 01:46:25 |
66.132.195.44 |
152.67.76.29 |
GET |
/.well-known/security.txt |
|
HTTP/1.1 |
404 |
134 |
|
US |
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) |
| 2026-08-11 01:46:28 |
66.132.195.44 |
rgifo.lol |
|
|
|
|
400 |
166 |
|
US |
|
| 2026-08-11 01:46:58 |
170.106.147.63 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
400 |
264 |
Santa Clara |
US |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-08-11 01:50:04 |
185.242.3.238 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36 |
| 2026-08-11 02:05:39 |
123.160.223.72 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
|
CN |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 |
| 2026-08-11 02:07:21 |
185.73.23.162 |
sensic.net |
GET |
/index.html |
|
HTTP/1.1 |
200 |
4095 |
|
DE |
Software Security Research/1.0 (+https://reverse-proxies-measurements.softsec.ruhr-uni-bochum.de) |
| 2026-08-11 02:15:13 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:15 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:15 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:16 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:17 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:18 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:18 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:19 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:20 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:21 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:15:21 |
172.216.11.41 |
rgifo.lol |
|
|
|
|
400 |
166 |
Phoenix |
US |
|
| 2026-08-11 02:21:16 |
205.210.31.147 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
US |
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity |
| 2026-08-11 02:25:13 |
78.153.140.251 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-08-11 02:25:13 |
78.153.140.251 |
152.67.76.29 |
POST |
/index.html |
|
HTTP/1.1 |
405 |
568 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-08-11 02:28:18 |
43.165.126.130 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Ashburn |
US |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-08-11 02:28:56 |
194.88.98.100 |
192.0.2.1 |
GET |
/ |
|
HTTP/1.1 |
404 |
162 |
Frankfurt am Main |
DE |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 02:29:10 |
89.21.67.153 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 02:29:10 |
89.21.67.154 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 02:29:10 |
81.19.216.110 |
152.67.76.29 |
GET |
/mcp/ |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 02:29:10 |
81.19.216.99 |
152.67.76.29 |
GET |
/sse |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-08-11 02:33:56 |
34.62.168.168 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Brussels |
BE |
python-requests/2.32.5 |
| 2026-08-11 02:39:32 |
82.156.34.74 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
301 |
178 |
Beijing |
CN |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-08-11 02:40:45 |
191.185.104.52 |
rgifo.lol |
POST |
/xmlrpc.php |
|
HTTP/1.1 |
404 |
162 |
Belo Horizonte |
BR |
Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/89.0.0.0 Safari/537.36 |
| 2026-08-11 02:42:56 |
209.38.98.226 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/2.0 |
200 |
1706 |
Amsterdam |
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 +https://forestengine.net/#opt-out |
| 2026-08-11 02:43:47 |
45.148.10.125 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
400 |
166 |
Amsterdam |
NL |
|
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
4095 |
Amsterdam |
NL |
l9tcpid/v1.1.0 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.env.production |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.env.development |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.aws/credentials |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/appsettings.json |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.env.local |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.env.prod |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/.npmrc |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/app/.env |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/backend/.env |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:47 |
45.148.10.125 |
152.67.76.29 |
GET |
/actuator/env |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:48 |
45.148.10.125 |
152.67.76.29 |
GET |
/terraform.tfstate |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:48 |
45.148.10.125 |
152.67.76.29 |
GET |
/info.php |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |
| 2026-08-11 02:43:48 |
45.148.10.125 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
134 |
Amsterdam |
NL |
l9explore/1.2.2 |