~/logs/cloudflare.logs.prod
- 1789720607000000 2026/09/18 08:36:47 [error] 1116#0: *43 connect() failed (111: Connection refused) while connecting to upstream, client: 172.20.0.4, server: kong, request: "POST /analytics/v1/api/logs?source_name=postgres.logs HTTP/1.1", upstream: "http://172.20.0.14:4000/api/logs?source_name=postgres.logs", host: "kong:8000" event body
- 1789720614000000 2026/09/18 08:36:54 [error] 1116#0: *43 connect() failed (111: Connection refused) while connecting to upstream, client: 172.20.0.4, server: kong, request: "POST /analytics/v1/api/logs?source_name=postgres.logs HTTP/1.1", upstream: "http://172.20.0.14:4000/api/logs?source_name=postgres.logs", host: "kong:8000" event body
- 1789720619000000 2026/09/18 08:36:59 [error] 1116#0: *43 connect() failed (111: Connection refused) while connecting to upstream, client: 172.20.0.4, server: kong, request: "POST /analytics/v1/api/logs?source_name=postgres.logs HTTP/1.1", upstream: "http://172.20.0.14:4000/api/logs?source_name=postgres.logs", host: "kong:8000" event body
- 1789800145000000 172.20.0.1 - - [19/Sep/2026:06:42:25 +0000] "GET /.mysql_history HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800145000000 172.20.0.1 - - [19/Sep/2026:06:42:25 +0000] "GET /.esmtprc HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800155000000 172.20.0.1 - - [19/Sep/2026:06:42:35 +0000] "GET /Server/.git/config HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800156000000 172.20.0.1 - - [19/Sep/2026:06:42:36 +0000] "GET /actuator/beans HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800156000000 172.20.0.1 - - [19/Sep/2026:06:42:36 +0000] "GET /actuator/jolokia HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800160000000 172.20.0.1 - - [19/Sep/2026:06:42:40 +0000] "GET /api/postman.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800168000000 172.20.0.1 - - [19/Sep/2026:06:42:48 +0000] "GET /artemis/actuator/env HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800168000000 172.20.0.1 - - [19/Sep/2026:06:42:48 +0000] "GET /actuator/env HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800168000000 172.20.0.1 - - [19/Sep/2026:06:42:48 +0000] "GET /conf/settings.xml HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800168000000 172.20.0.1 - - [19/Sep/2026:06:42:48 +0000] "GET /assets/auth.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800169000000 172.20.0.1 - - [19/Sep/2026:06:42:49 +0000] "GET /config.php.bak HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800172000000 172.20.0.1 - - [19/Sep/2026:06:42:52 +0000] "GET /client_secrets.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800173000000 172.20.0.1 - - [19/Sep/2026:06:42:53 +0000] "GET /config/ovh-backups.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800173000000 172.20.0.1 - - [19/Sep/2026:06:42:53 +0000] "GET /config.properties HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800173000000 172.20.0.1 - - [19/Sep/2026:06:42:53 +0000] "GET /configurations/config_default HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800173000000 172.20.0.1 - - [19/Sep/2026:06:42:53 +0000] "GET /core-cloud-config.yml HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800173000000 172.20.0.1 - - [19/Sep/2026:06:42:53 +0000] "GET /credentials/auth.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800177000000 172.20.0.1 - - [19/Sep/2026:06:42:57 +0000] "GET /django/settings.py HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800185000000 172.20.0.1 - - [19/Sep/2026:06:43:05 +0000] "GET /keycloak.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800186000000 172.20.0.1 - - [19/Sep/2026:06:43:06 +0000] "GET /node_repl_history HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800186000000 172.20.0.1 - - [19/Sep/2026:06:43:06 +0000] "GET /message-api/actuator/env HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800190000000 172.20.0.1 - - [19/Sep/2026:06:43:10 +0000] "GET /public/config.js HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800190000000 172.20.0.1 - - [19/Sep/2026:06:43:10 +0000] "GET /packages.config HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800195000000 172.20.0.1 - - [19/Sep/2026:06:43:15 +0000] "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800195000000 172.20.0.1 - - [19/Sep/2026:06:43:15 +0000] "GET /service-account-credentials.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800204000000 172.20.0.1 - - [19/Sep/2026:06:43:24 +0000] "GET /storage/ovh-backups.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800205000000 172.20.0.1 - - [19/Sep/2026:06:43:25 +0000] "GET /tmp/auth.json HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789800208000000 172.20.0.1 - - [19/Sep/2026:06:43:28 +0000] "GET /web/settings/settings.py HTTP/1.1" 401 175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" event body
- 1789807118000000 172.20.0.1 - - [19/Sep/2026:08:38:38 +0000] "GET /server HTTP/1.1" 401 30 "-" "Mozilla/5.0 (l9scan/2.0.934323e2031323e2939313e2731323; +https://leakix.net)" event body
- 1789807132000000 172.20.0.1 - - [19/Sep/2026:08:38:52 +0000] "POST /api/gql HTTP/1.1" 401 30 "-" "Mozilla/5.0 (l9scan/2.0.934323e2031323e2939313e2731323; +https://leakix.net)" event body
- 1789807140000000 172.20.0.1 - - [19/Sep/2026:08:39:00 +0000] "GET /.vscode/sftp.json HTTP/1.1" 401 30 "-" "Mozilla/5.0 (l9scan/2.0.934323e2031323e2939313e2731323; +https://leakix.net)" event body
- 1789807298000000 172.20.0.1 - - [19/Sep/2026:08:41:38 +0000] "GET / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" event body
- 1789807845000000 172.20.0.1 - - [19/Sep/2026:08:50:45 +0000] "GET /.env.old HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" event body
- 1789807858000000 172.20.0.1 - - [19/Sep/2026:08:50:58 +0000] "GET /.env.stage HTTP/1.1" 401 30 "http://supa.test.udmed.ru:80/.env.stage" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" event body
- 1789808911000000 172.20.0.1 - - [19/Sep/2026:09:08:31 +0000] "GET / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.7727.102 Safari/537.36" event body
- 1789818914000000 172.20.0.1 - - [19/Sep/2026:11:55:14 +0000] "GET /.env.bak HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818914000000 172.20.0.1 - - [19/Sep/2026:11:55:14 +0000] "GET /.env.remote HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818917000000 172.20.0.1 - - [19/Sep/2026:11:55:17 +0000] "GET /.env.json HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818917000000 172.20.0.1 - - [19/Sep/2026:11:55:17 +0000] "GET /.env~ HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818920000000 172.20.0.1 - - [19/Sep/2026:11:55:20 +0000] "GET /release/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818921000000 172.20.0.1 - - [19/Sep/2026:11:55:21 +0000] "GET /dist/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818922000000 172.20.0.1 - - [19/Sep/2026:11:55:22 +0000] "GET /laravel/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818922000000 172.20.0.1 - - [19/Sep/2026:11:55:22 +0000] "GET /live/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818922000000 172.20.0.1 - - [19/Sep/2026:11:55:22 +0000] "GET /prod/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818923000000 172.20.0.1 - - [19/Sep/2026:11:55:23 +0000] "GET /codeigniter/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818923000000 172.20.0.1 - - [19/Sep/2026:11:55:23 +0000] "GET /cms/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818924000000 172.20.0.1 - - [19/Sep/2026:11:55:24 +0000] "GET /v3/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818927000000 172.20.0.1 - - [19/Sep/2026:11:55:27 +0000] "GET /sbin/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818927000000 172.20.0.1 - - [19/Sep/2026:11:55:27 +0000] "GET /tools/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818928000000 172.20.0.1 - - [19/Sep/2026:11:55:28 +0000] "GET /erp/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818929000000 172.20.0.1 - - [19/Sep/2026:11:55:29 +0000] "GET /admin-panel/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818930000000 172.20.0.1 - - [19/Sep/2026:11:55:30 +0000] "GET /react/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818930000000 172.20.0.1 - - [19/Sep/2026:11:55:30 +0000] "GET /nest/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818931000000 172.20.0.1 - - [19/Sep/2026:11:55:31 +0000] "GET /backup/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818932000000 172.20.0.1 - - [19/Sep/2026:11:55:32 +0000] "GET /exapi/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818932000000 172.20.0.1 - - [19/Sep/2026:11:55:32 +0000] "GET /.env.backup1 HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818933000000 172.20.0.1 - - [19/Sep/2026:11:55:33 +0000] "GET /mailing/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818935000000 172.20.0.1 - - [19/Sep/2026:11:55:35 +0000] "GET /mandrill/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818938000000 172.20.0.1 - - [19/Sep/2026:11:55:38 +0000] "GET /mysql/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818940000000 172.20.0.1 - - [19/Sep/2026:11:55:40 +0000] "GET /production/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818941000000 172.20.0.1 - - [19/Sep/2026:11:55:41 +0000] "GET /test.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818942000000 172.20.0.1 - - [19/Sep/2026:11:55:42 +0000] "GET /test/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818942000000 172.20.0.1 - - [19/Sep/2026:11:55:42 +0000] "GET /phpinfo HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818944000000 172.20.0.1 - - [19/Sep/2026:11:55:44 +0000] "GET /hosting/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818946000000 172.20.0.1 - - [19/Sep/2026:11:55:46 +0000] "GET /uat/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818946000000 172.20.0.1 - - [19/Sep/2026:11:55:46 +0000] "GET /www/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789818947000000 172.20.0.1 - - [19/Sep/2026:11:55:47 +0000] "GET /includes/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789819791000000 172.20.0.1 - - [19/Sep/2026:12:09:51 +0000] "GET / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (iPad; CPU OS 7_3 like Mac OS X) AppleWebKit/537.37.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/7679.51" event body
- 1789836421000000 172.20.0.1 - - [19/Sep/2026:16:47:01 +0000] "GET / HTTP/1.1" 401 175 "https://supa.test.udmed.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" event body
- 1789921726000000 172.20.0.1 - - [20/Sep/2026:16:28:46 +0000] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" event body
- 1789923639000000 172.20.0.1 - - [20/Sep/2026:17:00:39 +0000] "POST / HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923642000000 172.20.0.1 - - [20/Sep/2026:17:00:42 +0000] "GET /.env.live HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923642000000 172.20.0.1 - - [20/Sep/2026:17:00:42 +0000] "GET /.env.swp HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923646000000 172.20.0.1 - - [20/Sep/2026:17:00:46 +0000] "GET /database/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923648000000 172.20.0.1 - - [20/Sep/2026:17:00:48 +0000] "GET /laravel/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923648000000 172.20.0.1 - - [20/Sep/2026:17:00:48 +0000] "GET /prod/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923649000000 172.20.0.1 - - [20/Sep/2026:17:00:49 +0000] "GET /wordpress/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923650000000 172.20.0.1 - - [20/Sep/2026:17:00:50 +0000] "GET /v2/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923651000000 172.20.0.1 - - [20/Sep/2026:17:00:51 +0000] "GET /api/v1/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923652000000 172.20.0.1 - - [20/Sep/2026:17:00:52 +0000] "GET /resources/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923652000000 172.20.0.1 - - [20/Sep/2026:17:00:52 +0000] "GET /api/v3/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923654000000 172.20.0.1 - - [20/Sep/2026:17:00:54 +0000] "GET /erp/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923655000000 172.20.0.1 - - [20/Sep/2026:17:00:55 +0000] "GET /admin-panel/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923657000000 172.20.0.1 - - [20/Sep/2026:17:00:57 +0000] "GET /temp/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923658000000 172.20.0.1 - - [20/Sep/2026:17:00:58 +0000] "GET /logs/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923659000000 172.20.0.1 - - [20/Sep/2026:17:00:59 +0000] "GET /mail/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923659000000 172.20.0.1 - - [20/Sep/2026:17:00:59 +0000] "GET /notify/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923662000000 172.20.0.1 - - [20/Sep/2026:17:01:02 +0000] "GET /cloud/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923663000000 172.20.0.1 - - [20/Sep/2026:17:01:03 +0000] "GET /ci/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923663000000 172.20.0.1 - - [20/Sep/2026:17:01:03 +0000] "GET /.git/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923664000000 172.20.0.1 - - [20/Sep/2026:17:01:04 +0000] "GET /circleci/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923665000000 172.20.0.1 - - [20/Sep/2026:17:01:05 +0000] "GET /worker/.env HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923669000000 172.20.0.1 - - [20/Sep/2026:17:01:09 +0000] "GET /info HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923670000000 172.20.0.1 - - [20/Sep/2026:17:01:10 +0000] "GET /server-status.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923671000000 172.20.0.1 - - [20/Sep/2026:17:01:11 +0000] "GET /smtp/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789923673000000 172.20.0.1 - - [20/Sep/2026:17:01:13 +0000] "GET /includes/phpinfo.php HTTP/1.1" 401 30 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
- 1789937349000000 172.20.0.1 - - [20/Sep/2026:20:49:09 +0000] "GET /feed/ HTTP/1.1" 401 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" event body
random(tips): Default behavior is to search the log message field (e.g. `error`).