| 2026-09-30 23:33:31 |
129.121.129.184 |
152.67.76.29 |
GET |
/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:36 |
129.121.129.184 |
152.67.76.29 |
GET |
/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:37 |
129.121.129.184 |
152.67.76.29 |
GET |
/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:38 |
129.121.129.184 |
152.67.76.29 |
GET |
/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:38 |
129.121.129.184 |
152.67.76.29 |
GET |
/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:39 |
129.121.129.184 |
152.67.76.29 |
GET |
/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:39 |
129.121.129.184 |
152.67.76.29 |
GET |
/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:39 |
129.121.129.184 |
152.67.76.29 |
GET |
/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:40 |
129.121.129.184 |
152.67.76.29 |
GET |
/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:41 |
129.121.129.184 |
152.67.76.29 |
GET |
/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:41 |
129.121.129.184 |
152.67.76.29 |
GET |
/index.php |
s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello |
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:41 |
129.121.129.184 |
152.67.76.29 |
GET |
/public/index.php |
s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello |
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:42 |
129.121.129.184 |
152.67.76.29 |
GET |
/index.php |
lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"));?>+/tmp/index1.php |
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:42 |
129.121.129.184 |
152.67.76.29 |
GET |
/index.php |
lang=../../../../../../../../tmp/index1 |
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:33:43 |
129.121.129.184 |
152.67.76.29 |
GET |
/containers/json |
|
HTTP/1.1 |
404 |
162 |
|
US |
libredtail-http |
| 2026-09-30 23:46:53 |
172.236.228.39 |
rgifo.lol |
|
|
|
|
400 |
166 |
Los Angeles |
US |
|
| 2026-09-30 23:46:55 |
172.236.228.39 |
rgifo.lol |
|
|
|
|
400 |
166 |
Los Angeles |
US |
|
| 2026-09-30 23:52:15 |
216.73.217.93 |
log.rgifo.lol |
GET |
/query |
page=2167&page_size=50 |
HTTP/2.0 |
200 |
3584 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-09-30 23:53:10 |
216.73.217.93 |
log.rgifo.lol |
GET |
/query |
page=1860 |
HTTP/2.0 |
200 |
3385 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-01 00:00:56 |
49.51.52.250 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
400 |
264 |
Santa Clara |
US |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-01 00:01:16 |
47.109.67.33 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
301 |
178 |
Chengdu |
CN |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
| 2026-10-01 00:07:54 |
198.235.24.36 |
rgifo.lol |
GET |
/ |
|
HTTP/1.0 |
301 |
178 |
|
US |
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity |
| 2026-10-01 00:09:44 |
193.180.166.44 |
rgifo.lol |
GET |
/ |
|
HTTP/1.1 |
301 |
178 |
|
SE |
Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115 |
| 2026-10-01 00:09:45 |
185.123.92.228 |
rgifo.lol |
GET |
/index.html |
|
HTTP/1.1 |
200 |
1718 |
|
SE |
Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115 |
| 2026-10-01 00:32:58 |
216.73.217.93 |
log.rgifo.lol |
GET |
/robots.txt |
|
HTTP/2.0 |
404 |
19 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-01 00:32:58 |
216.73.217.93 |
log.rgifo.lol |
GET |
/query |
page=2168&page_size=50 |
HTTP/2.0 |
200 |
3492 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-01 00:34:17 |
216.73.217.93 |
log.rgifo.lol |
GET |
/query |
page=1861 |
HTTP/2.0 |
200 |
4710 |
Columbus |
US |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| 2026-10-01 00:34:25 |
45.198.224.125 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
162 |
Stockholm |
SE |
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 2026-10-01 00:37:10 |
185.242.226.112 |
rgifo.lol |
|
|
|
|
400 |
166 |
|
US |
|
| 2026-10-01 00:38:25 |
172.71.172.234 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/1.1 |
301 |
178 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-01 00:38:25 |
172.71.172.235 |
rgifo.lol |
GET |
/wp-admin/install.php |
step=1 |
HTTP/2.0 |
404 |
123 |
Frankfurt am Main |
DE |
http://rgifo.lol/wp-admin/install.php?step=1 |
| 2026-10-01 00:43:52 |
94.154.43.100 |
152.67.76.29 |
GET |
/ |
|
HTTP/1.1 |
404 |
564 |
Bursa |
TR |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 |
| 2026-10-01 00:44:49 |
78.153.140.39 |
152.67.76.29 |
GET |
/.env |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-01 00:44:50 |
78.153.140.39 |
152.67.76.29 |
POST |
/ |
|
HTTP/1.1 |
404 |
196 |
City of London |
GB |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 |
| 2026-10-01 00:45:13 |
138.2.106.209 |
152.67.76.29 |
GET |
/.oci/config |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:13 |
138.2.106.209 |
152.67.76.29 |
GET |
/oci-config.json |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:13 |
138.2.106.209 |
152.67.76.29 |
GET |
/terraform.tfstate.backup |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:13 |
138.2.106.209 |
152.67.76.29 |
GET |
/terraform.tfstate |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:13 |
138.2.106.209 |
152.67.76.29 |
GET |
/.env.development |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/config/.env |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/.modal.toml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/litellm_config.yml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/config/litellm_config.yaml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/dify/.env |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/config.yml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/config.yaml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/config/secrets.yml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/docker-compose.yml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:45:16 |
138.2.106.209 |
152.67.76.29 |
GET |
/compose.yml |
|
HTTP/1.1 |
404 |
134 |
Loyang |
SG |
WebSiphon/next-0.1 |
| 2026-10-01 00:47:30 |
89.248.172.11 |
rgifo.lol |
GET |
/ |
|
HTTP/1.0 |
301 |
178 |
Utrecht |
NL |
Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG-SM-G891A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 |