HEX
Server: Apache
System: Linux vps121902.inmotionhosting.com 4.18.0 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
User: hipdev5 (1001)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
$ pwd: /home/hipdev5/access-logs/
Upload Files
File: /home/hipdev5/access-logs/envos-ff.hipdev.pro
147.185.132.91 - - [04/Aug/2026:09:02:30 -0400] "GET / HTTP/1.1" 301 276 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
45.154.98.134 - - [04/Aug/2026:13:11:17 -0400] "GET / HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
165.227.84.14 - - [04/Aug/2026:13:13:52 -0400] "GET / HTTP/1.1" 301 280 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:53 -0400] "GET /console/ HTTP/1.1" 301 288 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:54 -0400] "GET /server HTTP/1.1" 301 286 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:55 -0400] "GET /server-status HTTP/1.1" 301 293 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:57 -0400] "GET /about HTTP/1.1" 301 285 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:58 -0400] "GET /login.action HTTP/1.1" 301 292 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:13:59 -0400] "GET / HTTP/1.1" 301 280 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:00 -0400] "GET /___proxy_subdomain_whm/login HTTP/1.1" 301 308 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:00 -0400] "GET /___proxy_subdomain_cpanel HTTP/1.1" 301 305 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:00 -0400] "GET /v2/_catalog HTTP/1.1" 301 291 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:02 -0400] "GET /.DS_Store HTTP/1.1" 301 289 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:02 -0400] "GET /.env HTTP/1.1" 301 289 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:05 -0400] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 355 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:06 -0400] "GET /.git/config HTTP/1.1" 301 289 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:07 -0400] "POST /graphql HTTP/1.1" 301 287 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:08 -0400] "POST /api HTTP/1.1" 301 283 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:08 -0400] "POST /api/graphql HTTP/1.1" 301 291 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:08 -0400] "POST /graphql/api HTTP/1.1" 301 291 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:08 -0400] "POST /api/gql HTTP/1.1" 301 287 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:09 -0400] "GET /s/839313e2630323e2035323e2939313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 382 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:09 -0400] "GET /config.json HTTP/1.1" 301 291 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:11 -0400] "GET /telescope/requests HTTP/1.1" 301 298 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:11 -0400] "GET /info.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:12 -0400] "GET /.well-known/security.txt HTTP/1.1" 301 304 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:13 -0400] "GET /actuator/env HTTP/1.1" 301 292 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:14 -0400] "GET /trace.axd HTTP/1.1" 301 289 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:16 -0400] "GET /@vite/env HTTP/1.1" 301 289 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:17 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 297 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:18 -0400] "OPTIONS / HTTP/1.1" 301 280 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:19 -0400] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 305 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
165.227.84.14 - - [04/Aug/2026:13:14:20 -0400] "GET /debug/default/view?panel=config HTTP/1.1" 301 311 "-" "Mozilla/5.0 (l9scan/2.0.839313e2630323e2035323e2939313; +https://leakix.net)"
89.31.120.238 - - [04/Aug/2026:16:53:12 -0400] "GET / HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /public/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /backend/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /site/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /api/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /src/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /var/www/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /app/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /htdocs/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
34.64.240.191 - - [05/Aug/2026:06:55:15 -0400] "GET /wordpress/.git/config HTTP/1.1" 301 289 "-" "crusader-worker/1.0"
@ Telegram