~/logs/cloudflare.logs.prod
- 1789423794000000 2026/09/14 22:09:54 [error] 1111#0: *13 connect() failed (111: Connection refused) while connecting to upstream, client: 172.21.0.6, server: kong, request: "POST /analytics/v1/api/logs?source_name=postgres.logs HTTP/1.1", upstream: "http://172.21.0.13:4000/api/logs?source_name=postgres.logs", host: "kong:8000" event body
- 1789423802000000 2026/09/14 22:10:02 [error] 1111#0: *13 connect() failed (111: Connection refused) while connecting to upstream, client: 172.21.0.6, server: kong, request: "POST /analytics/v1/api/logs?source_name=postgres.logs HTTP/1.1", upstream: "http://172.21.0.13:4000/api/logs?source_name=postgres.logs", host: "kong:8000" event body
- 1789427246000000 172.20.0.4 - - [14/Sep/2026:23:07:26 +0000] "POST / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789427247000000 172.20.0.4 - - [14/Sep/2026:23:07:27 +0000] "GET /server/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789427248000000 172.20.0.4 - - [14/Sep/2026:23:07:28 +0000] "GET /live/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789427251000000 172.20.0.4 - - [14/Sep/2026:23:07:31 +0000] "GET /administrator/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789427254000000 172.20.0.4 - - [14/Sep/2026:23:07:34 +0000] "GET /info.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789427256000000 172.20.0.4 - - [14/Sep/2026:23:07:36 +0000] "GET /keyfile.json HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789493631000000 172.20.0.4 - - [15/Sep/2026:17:33:51 +0000] "GET /store/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789493653000000 172.20.0.4 - - [15/Sep/2026:17:34:13 +0000] "GET /preview/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789493661000000 172.20.0.4 - - [15/Sep/2026:17:34:21 +0000] "GET /cpanel/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789493668000000 172.20.0.4 - - [15/Sep/2026:17:34:28 +0000] "GET /google-key.json HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789571179000000 172.20.0.4 - - [16/Sep/2026:15:06:19 +0000] "GET /.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" event body
- 1789642200000000 172.20.0.4 - - [17/Sep/2026:10:50:00 +0000] "GET /frontend/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789642200000000 172.20.0.4 - - [17/Sep/2026:10:50:00 +0000] "GET /server/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789642205000000 172.20.0.4 - - [17/Sep/2026:10:50:05 +0000] "GET /api/v3/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789769496000000 172.20.0.4 - - [18/Sep/2026:22:11:36 +0000] "GET /erp/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789769521000000 172.20.0.4 - - [18/Sep/2026:22:12:01 +0000] "GET /test.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789769522000000 172.20.0.4 - - [18/Sep/2026:22:12:02 +0000] "GET /old/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789769524000000 172.20.0.4 - - [18/Sep/2026:22:12:04 +0000] "GET /phpversion.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789776324000000 172.20.0.4 - - [19/Sep/2026:00:05:24 +0000] "POST / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789776342000000 172.20.0.4 - - [19/Sep/2026:00:05:42 +0000] "GET /wordpress/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789776346000000 172.20.0.4 - - [19/Sep/2026:00:05:46 +0000] "GET /rest/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789971598000000 172.20.0.4 - - [21/Sep/2026:06:19:58 +0000] "GET /deploy/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789971601000000 172.20.0.4 - - [21/Sep/2026:06:20:01 +0000] "GET /api/v2/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789971613000000 172.20.0.4 - - [21/Sep/2026:06:20:13 +0000] "GET /pinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789971616000000 172.20.0.4 - - [21/Sep/2026:06:20:16 +0000] "GET /www/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789971617000000 172.20.0.4 - - [21/Sep/2026:06:20:17 +0000] "GET /wp-admin/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972980000000 172.20.0.4 - - [21/Sep/2026:06:43:00 +0000] "GET /.env.bak HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972982000000 172.20.0.4 - - [21/Sep/2026:06:43:02 +0000] "GET /frontend/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972984000000 172.20.0.4 - - [21/Sep/2026:06:43:04 +0000] "GET /symfony/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972995000000 172.20.0.4 - - [21/Sep/2026:06:43:15 +0000] "GET /old/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972996000000 172.20.0.4 - - [21/Sep/2026:06:43:16 +0000] "GET /server-info.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789972998000000 172.20.0.4 - - [21/Sep/2026:06:43:18 +0000] "GET /includes/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789986033000000 172.20.0.4 - - [21/Sep/2026:10:20:33 +0000] "GET /.env1 HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789986059000000 172.20.0.4 - - [21/Sep/2026:10:20:59 +0000] "GET /react/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790019448000000 172.20.0.4 - - [21/Sep/2026:19:37:28 +0000] "GET /home/.codex/auth.json HTTP/1.1" 401 30 "-" "crusader-worker/1.0" event body
- 1790079280000000 172.20.0.4 - - [22/Sep/2026:12:14:40 +0000] "GET /.git/config HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790079281000000 172.20.0.4 - - [22/Sep/2026:12:14:41 +0000] "GET /.env.save HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790079287000000 172.20.0.4 - - [22/Sep/2026:12:14:47 +0000] "GET /dev/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790079288000000 172.20.0.4 - - [22/Sep/2026:12:14:48 +0000] "GET /codeigniter/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790085035000000 172.20.0.4 - - [22/Sep/2026:13:50:35 +0000] "GET /test.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36" event body
- 1790085038000000 172.20.0.4 - - [22/Sep/2026:13:50:38 +0000] "GET /uploads../.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" event body
- 1790085040000000 172.20.0.4 - - [22/Sep/2026:13:50:40 +0000] "GET /firebase-admin.json HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" event body
- 1790085041000000 172.20.0.4 - - [22/Sep/2026:13:50:41 +0000] "GET /api/proc/self/environ HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" event body
- 1790128479000000 172.20.0.4 - - [23/Sep/2026:01:54:39 +0000] "GET /graphql HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" event body
- 1790128482000000 172.20.0.4 - - [23/Sep/2026:01:54:42 +0000] "GET /@fs/root/.env?raw?? HTTP/1.1" 401 30 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)" event body
- 1790128484000000 172.20.0.4 - - [23/Sep/2026:01:54:44 +0000] "GET /configuration.php.bak HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" event body
- 1790128484000000 172.20.0.4 - - [23/Sep/2026:01:54:44 +0000] "GET /services/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" event body
- 1790128488000000 172.20.0.4 - - [23/Sep/2026:01:54:48 +0000] "POST /api/templates/preview HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36" event body
- 1790223712000000 172.20.0.4 - - [24/Sep/2026:04:21:52 +0000] "GET /.env.remote HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790223715000000 172.20.0.4 - - [24/Sep/2026:04:21:55 +0000] "GET /.env_copy HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790223718000000 172.20.0.4 - - [24/Sep/2026:04:21:58 +0000] "GET /var/www/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790223722000000 172.20.0.4 - - [24/Sep/2026:04:22:02 +0000] "GET /v1/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790223731000000 172.20.0.4 - - [24/Sep/2026:04:22:11 +0000] "GET /postmark/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790235089000000 172.20.0.4 - - [24/Sep/2026:07:31:29 +0000] "GET /config/env/aws_credentials.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" event body
- 1790235089000000 172.20.0.4 - - [24/Sep/2026:07:31:29 +0000] "GET /static../.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" event body
- 1790235091000000 172.20.0.4 - - [24/Sep/2026:07:31:31 +0000] "GET /.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" event body
- 1790235091000000 172.20.0.4 - - [24/Sep/2026:07:31:31 +0000] "GET /info.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" event body
- 1790235094000000 172.20.0.4 - - [24/Sep/2026:07:31:34 +0000] "GET /images../.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" event body
- 1790235095000000 172.20.0.4 - - [24/Sep/2026:07:31:35 +0000] "GET /.pypirc HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" event body
- 1790251120000000 172.20.0.4 - - [24/Sep/2026:11:58:40 +0000] "GET /file.php HTTP/1.1" 401 30 "-" "-" event body
- 1790268795000000 172.20.0.4 - - [24/Sep/2026:16:53:15 +0000] "GET /goods.php HTTP/1.1" 401 30 "-" "-" event body
- 1790268817000000 172.20.0.4 - - [24/Sep/2026:16:53:37 +0000] "GET /0.php HTTP/1.1" 401 30 "-" "-" event body
- 1790337979000000 172.20.0.4 - - [25/Sep/2026:12:06:19 +0000] "GET /ccc.php HTTP/1.1" 401 30 "-" "-" event body
- 1790417320000000 172.20.0.4 - - [26/Sep/2026:10:08:40 +0000] "GET /.env.dev HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1790417322000000 172.20.0.4 - - [26/Sep/2026:10:08:42 +0000] "GET /application-dev.yml HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1790417323000000 172.20.0.4 - - [26/Sep/2026:10:08:43 +0000] "GET /aws/secret.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1790417324000000 172.20.0.4 - - [26/Sep/2026:10:08:44 +0000] "GET /aws/secrets.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1790417335000000 172.20.0.4 - - [26/Sep/2026:10:08:55 +0000] "GET /.docker/laravel/app/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1790430196000000 172.20.0.4 - - [26/Sep/2026:13:43:16 +0000] "GET /wp-admin/includes/fff.php HTTP/1.1" 401 30 "-" "-" event body
- 1790433741000000 172.20.0.4 - - [26/Sep/2026:14:42:21 +0000] "GET /wsd.php HTTP/1.1" 401 30 "-" "-" event body
- 1790434581000000 172.20.0.4 - - [26/Sep/2026:14:56:21 +0000] "GET /24.php HTTP/1.1" 401 30 "-" "-" event body
- 1790434587000000 172.20.0.4 - - [26/Sep/2026:14:56:27 +0000] "GET /tegubsiu.php HTTP/1.1" 401 30 "-" "-" event body
- 1790451352000000 172.20.0.4 - - [26/Sep/2026:19:35:52 +0000] "GET /01.php HTTP/1.1" 401 30 "-" "-" event body
- 1790460617000000 172.20.0.4 - - [26/Sep/2026:22:10:17 +0000] "POST / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460620000000 172.20.0.4 - - [26/Sep/2026:22:10:20 +0000] "GET /.env.txt HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460622000000 172.20.0.4 - - [26/Sep/2026:22:10:22 +0000] "GET /core/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460624000000 172.20.0.4 - - [26/Sep/2026:22:10:24 +0000] "GET /www/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460627000000 172.20.0.4 - - [26/Sep/2026:22:10:27 +0000] "GET /gateway/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460628000000 172.20.0.4 - - [26/Sep/2026:22:10:28 +0000] "GET /lib/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460629000000 172.20.0.4 - - [26/Sep/2026:22:10:29 +0000] "GET /scripts/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790460642000000 172.20.0.4 - - [26/Sep/2026:22:10:42 +0000] "GET /info HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790490404000000 172.20.0.4 - - [27/Sep/2026:06:26:44 +0000] "GET /dist../.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" event body
- 1790490404000000 172.20.0.4 - - [27/Sep/2026:06:26:44 +0000] "GET /debug/vars HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" event body
- 1790490413000000 172.20.0.4 - - [27/Sep/2026:06:26:53 +0000] "GET /.streamlit/secrets.toml HTTP/1.1" 401 30 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" event body
- 1790490413000000 172.20.0.4 - - [27/Sep/2026:06:26:53 +0000] "GET /.env.save HTTP/1.1" 401 30 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" event body
- 1790518512000000 172.20.0.4 - - [27/Sep/2026:14:15:12 +0000] "GET /xiugai.php?p= HTTP/1.1" 401 30 "-" "-" event body
- 1790526707000000 172.20.0.4 - - [27/Sep/2026:16:31:47 +0000] "GET /database/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790526707000000 172.20.0.4 - - [27/Sep/2026:16:31:47 +0000] "GET /current/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790526713000000 172.20.0.4 - - [27/Sep/2026:16:31:53 +0000] "GET /resources/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790526719000000 172.20.0.4 - - [27/Sep/2026:16:31:59 +0000] "GET /campaign/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790526722000000 172.20.0.4 - - [27/Sep/2026:16:32:02 +0000] "GET /cd/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790526729000000 172.20.0.4 - - [27/Sep/2026:16:32:09 +0000] "GET /htdocs/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1790530061000000 172.20.0.4 - - [27/Sep/2026:17:27:41 +0000] "GET /ebkid.php HTTP/1.1" 401 30 "-" "-" event body
- 1790530077000000 172.20.0.4 - - [27/Sep/2026:17:27:57 +0000] "GET /098.php HTTP/1.1" 401 30 "-" "-" event body
- 1790530086000000 172.20.0.4 - - [27/Sep/2026:17:28:06 +0000] "GET /gm.php HTTP/1.1" 401 30 "-" "-" event body
- 1790571209000000 172.20.0.4 - - [28/Sep/2026:04:53:29 +0000] "GET /wpxml.php HTTP/1.1" 401 30 "-" "-" event body
- 1790633693000000 172.20.0.4 - - [28/Sep/2026:22:14:53 +0000] "GET / HTTP/1.1" 401 30 "https://studio.hufenreuter.it" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" event body
- 1790633705000000 172.20.0.4 - - [28/Sep/2026:22:15:05 +0000] "GET /backend/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" event body
random(tips): Integers support greater and less than symobols (e.g. `m.response.origin_time:<1000`).