509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 2a03:2880:11ff:72:: - - [16/Oct/2026:12:33:57 +0000] "GET /lead-form-ar/1?sourcee=facebook HTTP/1.1" 200 8156 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.105.42.26 - - [16/Oct/2026:12:42:14 +0000] "GET /.well-known/acme-challenge/14AE5DYF6LLR3AAWDRBPZ1NXTPAQ5YEQ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 2a03:2880:15ff:45:: - - [16/Oct/2026:13:33:26 +0000] "GET /lead-form-ar/1?sourcee=facebook HTTP/1.1" 200 8159 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2a03:2880:15ff:5f:: - - [16/Oct/2026:13:49:30 +0000] "GET /lead-form-ar/1?sourcee=facebook HTTP/1.1" 200 8157 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.105.42.26 - - [16/Oct/2026:15:42:13 +0000] "GET /.well-known/acme-challenge/GTH96HH7S4BK31RH-STJG6BRKP_J0DKR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 172.105.42.26 - - [16/Oct/2026:18:42:14 +0000] "GET /.well-known/acme-challenge/CVMEXIWDQTJUB488N--COVGS1GPM-15L HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 66.249.73.72 - - [16/Oct/2026:19:23:15 +0000] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.73.72 - - [16/Oct/2026:19:23:15 +0000] "GET / HTTP/1.1" 200 20 "-" "GoogleOther" 2a03:2880:15ff:47:: - - [16/Oct/2026:19:54:16 +0000] "GET /lead-form-ar/1?sourcee=facebook HTTP/1.1" 200 8157 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2a03:2880:15ff:43:: - - [16/Oct/2026:21:23:42 +0000] "GET /lead-form-ar/1?sourcee=facebook HTTP/1.1" 200 8154 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.105.42.26 - - [16/Oct/2026:21:42:14 +0000] "GET /.well-known/acme-challenge/T-Q958F7VP96_H6KKBBCH8AFGMUHTL1C HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 198.235.24.109 - - [17/Oct/2026:00:33:07 +0000] "GET /webshell HTTP/1.1" 200 20 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [17/Oct/2026:00:42:13 +0000] "GET /.well-known/acme-challenge/BQXDJ92FNRZKPT4SOMMHVG-8OES4ISN- HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 205.210.31.168 - - [17/Oct/2026:00:53:53 +0000] "GET /shell.php HTTP/1.1" 403 9422 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 198.235.24.78 - - [17/Oct/2026:01:02:27 +0000] "GET /webshell.php HTTP/1.1" 403 9422 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 198.235.24.47 - - [17/Oct/2026:01:10:13 +0000] "GET /shell HTTP/1.1" 200 20 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [17/Oct/2026:03:42:14 +0000] "GET /.well-known/acme-challenge/BN64I-MEZ4JEP6JJ2KLUZ8IL15LRO9X4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 147.90.209.3 - - [17/Oct/2026:06:13:56 +0000] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.105.42.26 - - [17/Oct/2026:06:42:13 +0000] "GET /.well-known/acme-challenge/5QAN7NO80AKQI_PF_TQ5TYG2FUU8MHQB HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 85.204.70.116 - - [17/Oct/2026:07:25:44 +0000] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:44 +0000] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:45 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:45 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:45 +0000] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:45 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:46 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:46 +0000] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:47 +0000] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:47 +0000] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:47 +0000] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:47 +0000] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.116 - - [17/Oct/2026:07:25:48 +0000] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"