FM / cp072267

/usr/local/apache/domlogs/cp072267

Name	Size	Mode	Actions
7sys-global.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
7sys-global.com.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
33665468-36-20211001100808.webstarterz.com	5064	0640	edit dl rm
33665468-36-20211001100808.webstarterz.com-ssl_log	223989	0640	edit dl rm
aimhigh-group.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
aimhigh-group.com.33665468-36-20211001100808.webstarterz.com-ssl_log	7638	0640	edit dl rm
armytraderacademy.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
armytraderacademy.com.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
commodity.irec-global.com	0	0640	edit dl rm
commodity.irec-global.com-ssl_log	0	0640	edit dl rm
ctg-aggregate.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
ctg-aggregate.com.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
dkrgroupholdings.com.33665468-36-20211001100808.webstarterz.com	36743	0640	edit dl rm
dkrgroupholdings.com.33665468-36-20211001100808.webstarterz.com-ssl_log	1426431	0640	edit dl rm
eon-biomass.com.33665468-36-20211001100808.webstarterz.com	102975	0640	edit dl rm
eon-biomass.com.33665468-36-20211001100808.webstarterz.com-ssl_log	819680	0640	edit dl rm
irec-energy.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
irec-energy.com.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
irec-global.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
irec-global.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
medical.irec-global.com	0	0640	edit dl rm
medical.irec-global.com-ssl_log	0	0640	edit dl rm
nptech-group.com.33665468-36-20211001100808.webstarterz.com	0	0640	edit dl rm
nptech-group.com.33665468-36-20211001100808.webstarterz.com-ssl_log	0	0640	edit dl rm
pornpukdee-group.com.33665468-36-20211001100808.webstarterz.com	357372	0640	edit dl rm
pornpukdee-group.com.33665468-36-20211001100808.webstarterz.com-ssl_log	1060715	0640	edit dl rm
shop.irec-global.com	0	0640	edit dl rm
shop.irec-global.com-ssl_log	0	0640	edit dl rm
th.eon-group.com.33665468-36-20211001100808.webstarterz.com	316	0640	edit dl rm
th.eon-group.com.33665468-36-20211001100808.webstarterz.com-ssl_log	500	0640	edit dl rm

Edit: /usr/local/apache/domlogs/cp072267/33665468-36-20211001100808.webstarterz.com (5064B)

34.136.142.193 - - [02/Sep/2026:19:29:03 +0700] "GET / HTTP/1.1" 200 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:03 +0700] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:03 +0700] "GET /feed/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:03 +0700] "GET /xmlrpc.php?rsd HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:04 +0700] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:04 +0700] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:04 +0700] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:04 +0700] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:05 +0700] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:05 +0700] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:05 +0700] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:05 +0700] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:06 +0700] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:06 +0700] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:06 +0700] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.136.142.193 - - [02/Sep/2026:19:29:06 +0700] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /site/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /htdocs/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /api/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /html/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /backend/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /var/www/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /wordpress/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /www/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /app/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /src/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
34.75.130.99 - - [02/Sep/2026:22:00:02 +0700] "GET /public/.git/config HTTP/1.1" 404 - "-" "crusader-worker/1.0"
205.210.31.153 - - [03/Sep/2026:00:38:14 +0700] "GET / HTTP/1.1" 200 1044 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"

cmd: