YANZ UPLOAD ANJG

34.204.184.214 - - [01/Sep/2026:02:42:11 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 34.237.50.25 - - [01/Sep/2026:02:42:11 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 146.190.149.210 - - [02/Sep/2026:15:30:53 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 142.147.250.3 - - [02/Sep/2026:22:52:43 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15" 34.134.217.15 - - [07/Sep/2026:12:59:36 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:36 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:37 +0200] "GET /feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:37 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:37 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:38 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:38 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:38 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:38 +0200] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:39 +0200] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:39 +0200] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:39 +0200] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:39 +0200] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:40 +0200] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:40 +0200] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.134.217.15 - - [07/Sep/2026:12:59:40 +0200] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 134.209.203.207 - - [09/Sep/2026:05:21:35 +0200] "GET /wp-login.php HTTP/1.1" 404 796 "-" "Mozilla/5.0" 104.164.6.213 - - [10/Sep/2026:02:52:28 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 172.120.9.53 - - [10/Sep/2026:02:52:28 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 63.141.253.98 - - [10/Sep/2026:04:26:48 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 63.141.253.98 - - [10/Sep/2026:04:26:49 +0200] "GET / HTTP/1.1" 200 0 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 221.10.220.79 - - [10/Sep/2026:09:30:40 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 221.10.220.79 - - [10/Sep/2026:09:30:46 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 221.10.220.79 - - [10/Sep/2026:09:32:27 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 221.10.220.79 - - [10/Sep/2026:09:32:31 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 74.7.228.14 - - [10/Sep/2026:23:24:40 +0200] "GET /robots.txt HTTP/1.1" 200 104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.3 - - [11/Sep/2026:06:09:43 +0200] "GET /robots.txt HTTP/1.1" 200 105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 38.102.16.4 - - [12/Sep/2026:03:50:47 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36 Edg/86.0.622.51" 137.184.188.152 - - [12/Sep/2026:08:08:01 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.188.152 - - [12/Sep/2026:08:08:02 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 205.210.31.154 - - [12/Sep/2026:13:17:13 +0200] "GET / HTTP/1.1" 200 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 147.185.132.150 - - [13/Sep/2026:05:22:49 +0200] "GET / HTTP/1.1" 200 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 149.154.161.218 - - [14/Sep/2026:21:35:33 +0200] "GET /alf-cur.php HTTP/1.1" 404 0 "-" "TelegramBot (like TwitterBot)" 34.24.15.81 - - [15/Sep/2026:15:30:35 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.138.162.172 - - [15/Sep/2026:15:45:34 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.76.180.131 - - [15/Sep/2026:15:56:50 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 168.144.166.109 - - [16/Sep/2026:06:52:31 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 143.198.168.86 - - [16/Sep/2026:06:57:28 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 143.198.168.86 - - [16/Sep/2026:06:57:28 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 34.22.238.32 - - [16/Sep/2026:17:17:38 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 38.94.178.188 - - [16/Sep/2026:23:30:49 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:82.0) Gecko/20100101 Firefox/82.0" 35.255.205.104 - - [17/Sep/2026:12:44:46 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 136.70.5.168 - - [17/Sep/2026:13:25:32 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.26.206.50 - - [17/Sep/2026:18:17:32 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 167.71.164.113 - - [18/Sep/2026:04:27:06 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 34.63.210.13 - - [18/Sep/2026:17:34:43 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 100.50.94.209 - - [20/Sep/2026:05:32:27 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 197.242.150.196 - - [21/Sep/2026:22:27:02 +0200] "GET /.well-known/acme-challenge/GZEWDHSDEACFC9HQ6S63F65SH5GXTPKV HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 197.242.150.196 - - [21/Sep/2026:22:27:02 +0200] "GET /.well-known/acme-challenge/C6_-FTLWUVYBQD-L-5EOOC_GV6U1ZCGC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 23.178.112.107 - - [21/Sep/2026:22:30:28 +0200] "GET /.well-known/acme-challenge/Rnkq9eF0PW6I8jjtHy7Zi-9xPvXzEVUmqkAii0wvPGU HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 23.178.112.107 - - [21/Sep/2026:22:30:28 +0200] "GET /.well-known/acme-challenge/Ni_YFdWhbuXRNRvyc0sroOAkCbD65Va3Dgp5KGpW_Gw HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.189.11.195 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Rnkq9eF0PW6I8jjtHy7Zi-9xPvXzEVUmqkAii0wvPGU HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.60.13.228 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Rnkq9eF0PW6I8jjtHy7Zi-9xPvXzEVUmqkAii0wvPGU HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.50.235.28 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Ni_YFdWhbuXRNRvyc0sroOAkCbD65Va3Dgp5KGpW_Gw HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.139.227.0 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Rnkq9eF0PW6I8jjtHy7Zi-9xPvXzEVUmqkAii0wvPGU HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.220.19.90 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Ni_YFdWhbuXRNRvyc0sroOAkCbD65Va3Dgp5KGpW_Gw HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 16.147.86.148 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Rnkq9eF0PW6I8jjtHy7Zi-9xPvXzEVUmqkAii0wvPGU HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 100.23.99.44 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Ni_YFdWhbuXRNRvyc0sroOAkCbD65Va3Dgp5KGpW_Gw HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.214.132.190 - - [21/Sep/2026:22:30:29 +0200] "GET /.well-known/acme-challenge/Ni_YFdWhbuXRNRvyc0sroOAkCbD65Va3Dgp5KGpW_Gw HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 34.203.205.216 - - [21/Sep/2026:22:35:39 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.203.205.216 - - [21/Sep/2026:22:35:39 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/auth.json.save HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.config/claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /old/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /old/.claude.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /config/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /backup/.config/codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /bak/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /htdocs/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /bak/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.config/codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /backup/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /backup/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.claude/settings.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.claude.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /www/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /html/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/auth.json.txt HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /public/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.claude/.credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /app/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /old/.config/codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /app/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /root/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /tmp/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/auth.json.old HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/config.toml HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/auth.json.bak HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /.codex/config.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /backup/.claude.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /old/.claude/credentials.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /html/.claude.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /data/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /site/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /uploads/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 34.97.74.196 - - [22/Sep/2026:06:49:15 +0200] "GET /files/.codex/auth.json HTTP/1.1" 200 0 "-" "crusader-worker/1.0" 100.50.94.209 - - [22/Sep/2026:08:23:50 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko/20100101 Firefox/139.0" 100.50.94.209 - - [22/Sep/2026:08:23:50 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4093.0 Safari/537.36 Edg/83.0.470.0" 143.198.221.194 - - [22/Sep/2026:09:23:22 +0200] "GET /license.txt HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 136.70.186.97 - - [22/Sep/2026:12:32:02 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.7.214.176 - - [22/Sep/2026:13:07:57 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 146.190.163.176 - - [22/Sep/2026:17:03:12 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 146.190.163.176 - - [22/Sep/2026:17:03:13 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 34.24.251.241 - - [22/Sep/2026:17:21:39 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 143.198.221.194 - - [22/Sep/2026:23:20:47 +0200] "GET /license.txt HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 167.71.35.139 - - [23/Sep/2026:02:15:08 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.71.35.139 - - [23/Sep/2026:02:15:09 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.227.131.8 - - [23/Sep/2026:08:12:27 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 165.227.22.241 - - [23/Sep/2026:17:25:46 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 201.79.50.2 - - [24/Sep/2026:14:21:06 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 201.79.50.2 - - [24/Sep/2026:14:21:07 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 138.197.159.242 - - [25/Sep/2026:02:33:00 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 138.197.159.242 - - [25/Sep/2026:02:33:00 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 127.0.0.1 - - [25/Sep/2026:04:39:18 +0200] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 5.1.1; A37f Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.126 Mobile Safari/537.36" 69.197.139.54 - - [25/Sep/2026:04:58:04 +0200] "GET /api/session/properties HTTP/1.1" 200 0 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 34.72.176.129 - - [25/Sep/2026:07:25:12 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edge/12.246" 134.209.34.232 - - [26/Sep/2026:04:13:36 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 134.209.34.232 - - [26/Sep/2026:04:13:37 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.158.64.193 - - [26/Sep/2026:13:06:33 +0200] "GET /media/system/js/core.js HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.158.64.193 - - [26/Sep/2026:13:06:38 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.77.95.84 - - [26/Sep/2026:17:52:05 +0200] "GET /media/system/js/core.js HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.77.95.84 - - [26/Sep/2026:17:52:08 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 23.27.146.28 - - [27/Sep/2026:02:05:35 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36 Edg/86.0.622.51" 167.99.111.78 - - [27/Sep/2026:03:45:05 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 167.99.111.78 - - [27/Sep/2026:04:04:29 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 167.99.111.78 - - [27/Sep/2026:04:04:30 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 167.99.111.78 - - [27/Sep/2026:04:04:30 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 205.169.39.115 - - [27/Sep/2026:09:17:37 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 205.169.39.115 - - [27/Sep/2026:09:17:44 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 136.86.192.54 - - [27/Sep/2026:14:17:45 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 35.197.86.120 - - [27/Sep/2026:16:51:27 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 136.90.8.177 - - [27/Sep/2026:17:31:11 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.31.78.3 - - [28/Sep/2026:03:39:40 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 161.35.238.94 - - [30/Sep/2026:15:34:41 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 161.35.238.94 - - [30/Sep/2026:15:34:41 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 46.253.141.120 - - [30/Sep/2026:22:08:27 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:82.0) Gecko/20100101 Firefox/82.0" 138.197.40.47 - - [06/Oct/2026:06:25:03 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 52.2.115.67 - - [09/Oct/2026:15:59:17 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" 136.119.204.15 - - [09/Oct/2026:17:48:45 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 159.223.119.193 - - [10/Oct/2026:07:57:56 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 159.223.119.193 - - [10/Oct/2026:07:57:56 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 189.81.191.77 - - [11/Oct/2026:06:46:34 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Zoom 3.6.0; rv:11.0) like Gecko" 3.93.133.181 - - [11/Oct/2026:20:45:04 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 3.93.133.181 - - [11/Oct/2026:20:45:04 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36" 178.128.153.211 - - [14/Oct/2026:14:13:34 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 178.128.153.211 - - [14/Oct/2026:14:13:35 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 104.194.196.254 - - [14/Oct/2026:23:06:18 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36 Edg/86.0.622.51" 74.7.175.174 - - [17/Oct/2026:06:18:59 +0200] "GET /robots.txt HTTP/1.1" 200 105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 18.215.2.117 - - [18/Oct/2026:04:37:51 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 74.7.241.135 - - [18/Oct/2026:16:19:26 +0200] "GET /robots.txt HTTP/1.1" 200 105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 184.195.57.183 - - [20/Oct/2026:11:28:15 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 52.87.95.254 - - [20/Oct/2026:11:28:15 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 159.253.220.163 - - [22/Oct/2026:15:11:50 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 194.68.112.222 - - [22/Oct/2026:16:46:38 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 178.62.93.212 - - [23/Oct/2026:05:31:37 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 64.227.24.78 - - [24/Oct/2026:12:09:07 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 64.227.24.78 - - [24/Oct/2026:12:09:08 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.236.123.207 - - [24/Oct/2026:22:54:00 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 181.215.76.14 - - [25/Oct/2026:05:06:02 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Zoom 3.6.0; rv:11.0) like Gecko" 34.236.123.207 - - [27/Oct/2026:07:14:22 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 34.236.123.207 - - [27/Oct/2026:07:14:22 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 165.245.239.20 - - [27/Oct/2026:15:02:55 +0200] "GET /wp-login.php HTTP/1.1" 200 0 "-" "Mozilla/5.0" 152.42.143.7 - - [28/Oct/2026:02:37:55 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 152.42.143.7 - - [28/Oct/2026:02:37:56 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 116.206.50.11 - - [28/Oct/2026:21:22:49 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Zoom 3.6.0; rv:11.0) like Gecko" 3.139.242.79 - - [02/Nov/2026:23:59:08 +0200] "GET / HTTP/1.1" 200 0 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 34.27.140.23 - - [06/Nov/2026:02:17:03 +0200] "GET /okovsq9qt7bwazjbF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.27.140.23 - - [06/Nov/2026:02:17:03 +0200] "GET /okovsq9qt7bwazjbF.php?p= HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136.64.32.248 - - [06/Nov/2026:02:19:35 +0200] "GET /okovsq9qt7bwazjbF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136.64.32.248 - - [06/Nov/2026:02:19:35 +0200] "GET /okovsq9qt7bwazjbF.php?p= HTTP/1.1" 200 11561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.164.6.204 - - [06/Nov/2026:02:49:06 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 104.164.14.209 - - [06/Nov/2026:02:49:06 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 182.8.1.64 - - [07/Nov/2026:00:04:30 +0200] "GET /okovsq9qt7bwazjbF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.64 - - [07/Nov/2026:00:04:31 +0200] "GET /okovsq9qt7bwazjbF.php?p= HTTP/1.1" 200 11530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 35.227.170.87 - - [07/Nov/2026:02:21:11 +0200] "GET /y585is0d8vtrswfzF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.227.170.87 - - [07/Nov/2026:02:21:12 +0200] "GET /y585is0d8vtrswfzF.php?p= HTTP/1.1" 200 11413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.204.240.42 - - [07/Nov/2026:05:28:40 +0200] "GET /index.php?params=1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.230.59.227 - - [07/Nov/2026:12:03:31 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 157.230.59.227 - - [07/Nov/2026:12:03:31 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 38.106.123.17 - - [08/Nov/2026:01:09:25 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" 167.17.71.36 - - [09/Nov/2026:02:21:25 +0200] "GET /y585is0d8vtrswfzF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 167.17.71.36 - - [09/Nov/2026:02:21:26 +0200] "GET /y585is0d8vtrswfzF.php?p= HTTP/1.1" 200 11622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 167.17.71.36 - - [09/Nov/2026:02:22:50 +0200] "GET /okovsq9qt7bwazjbF.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 167.17.71.36 - - [09/Nov/2026:02:22:51 +0200] "GET /okovsq9qt7bwazjbF.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.114 - - [10/Nov/2026:00:28:31 +0200] "GET /y585is0d8vtrswfzF.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.114 - - [10/Nov/2026:00:28:33 +0200] "GET /y585is0d8vtrswfzF.php?p= HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 34.133.191.179 - - [10/Nov/2026:01:51:30 +0200] "GET /m7wfcrnkg9ifj43uM.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.133.191.179 - - [10/Nov/2026:01:51:30 +0200] "GET /m7wfcrnkg9ifj43uM.php?p= HTTP/1.1" 200 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 182.8.1.109 - - [11/Nov/2026:01:27:17 +0200] "GET /m7wfcrnkg9ifj43uM.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.109 - - [11/Nov/2026:01:27:18 +0200] "GET /m7wfcrnkg9ifj43uM.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.109 - - [11/Nov/2026:01:28:28 +0200] "GET /y585is0d8vtrswfzF.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.109 - - [11/Nov/2026:01:28:29 +0200] "GET /y585is0d8vtrswfzF.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.64.127.65 - - [11/Nov/2026:02:32:29 +0200] "GET /ytq7fv184iabavs1F.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136.64.127.65 - - [11/Nov/2026:02:32:29 +0200] "GET /ytq7fv184iabavs1F.php?p= HTTP/1.1" 200 5705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67.205.137.113 - - [11/Nov/2026:08:42:07 +0200] "GET /favicon.ico HTTP/1.1" 404 796 "http://www.gems.ritasselection.co.za/" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 67.205.137.113 - - [11/Nov/2026:08:42:06 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" 182.8.1.10 - - [12/Nov/2026:00:05:14 +0200] "GET /ytq7fv184iabavs1F.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.8.1.10 - - [12/Nov/2026:00:05:15 +0200] "GET /ytq7fv184iabavs1F.php?p= HTTP/1.1" 200 5778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 142.147.251.101 - - [12/Nov/2026:00:13:06 +0200] "GET / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:82.0) Gecko/20100101 Firefox/82.0"