185.156.42.209 - - [08/Nov/2025:12:21:48 -0500] "POST /wp-cron.php?doing_wp_cron=1762622508.2987649440765380859375 HTTP/1.1" 200 0 "https://smt.goodface.com.ua/wp-cron.php?doing_wp_cron=1762622508.2987649440765380859375" "WordPress/5.6.16; https://smt.goodface.com.ua" 205.210.31.73 - - [08/Nov/2025:12:21:49 -0500] "GET / HTTP/1.1" 500 2625 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 206.189.2.13 - - [08/Nov/2025:14:18:15 -0500] "GET / HTTP/1.1" 499 0 "-" "-" 185.156.42.209 - - [08/Nov/2025:14:18:18 -0500] "POST /wp-cron.php?doing_wp_cron=1762629498.3320889472961425781250 HTTP/1.1" 200 0 "https://smt.goodface.com.ua/wp-cron.php?doing_wp_cron=1762629498.3320889472961425781250" "WordPress/5.6.16; https://smt.goodface.com.ua" 185.156.42.209 - - [08/Nov/2025:14:18:18 -0500] "POST /wp-cron.php?doing_wp_cron=1762629498.3323409557342529296875 HTTP/1.1" 200 0 "https://smt.goodface.com.ua/wp-cron.php?doing_wp_cron=1762629498.3323409557342529296875" "WordPress/5.6.16; https://smt.goodface.com.ua" 206.189.2.13 - - [08/Nov/2025:14:18:19 -0500] "GET / HTTP/1.1" 500 2625 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA022971) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3114.98 Mobile Safari/537.3" 206.189.2.13 - - [08/Nov/2025:14:18:22 -0500] "POST /graphql HTTP/1.1" 499 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:24 -0500] "POST /api HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:26 -0500] "POST /api/graphql HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:28 -0500] "POST /graphql/api HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:29 -0500] "POST /api/gql HTTP/1.1" 499 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:31 -0500] "GET /swagger-ui.html HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:32 -0500] "GET /swagger/index.html HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:34 -0500] "GET /swagger/swagger-ui.html HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:36 -0500] "GET /webjars/swagger-ui/index.html HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:38 -0500] "GET /swagger.json HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:39 -0500] "GET /swagger/v1/swagger.json HTTP/1.1" 499 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:18:42 -0500] "GET /@vite/env HTTP/1.1" 499 0 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:45 -0500] "GET /actuator/env HTTP/1.1" 499 0 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:48 -0500] "GET /server HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:49 -0500] "GET /.vscode/sftp.json HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:50 -0500] "GET /about HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:52 -0500] "GET /debug/default/view?panel=config HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:53 -0500] "GET /v2/_catalog HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:56 -0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:57 -0500] "GET /server-status HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:18:59 -0500] "GET /login.action HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:01 -0500] "GET /_all_dbs HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 206.189.2.13 - - [08/Nov/2025:14:19:03 -0500] "GET /.DS_Store HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:04 -0500] "GET /.env HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:05 -0500] "GET /.git/config HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:07 -0500] "GET /s/930323e22343e2635313e2538313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:08 -0500] "GET /config.json HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:11 -0500] "GET /telescope/requests HTTP/1.1" 404 2622 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:14 -0500] "GET /info.php HTTP/1.1" 499 0 "-" "Go-http-client/1.1" 206.189.2.13 - - [08/Nov/2025:14:19:16 -0500] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 304 "-" "Go-http-client/1.1" 185.156.42.209 - - [08/Nov/2025:14:40:31 -0500] "POST /wp-cron.php?doing_wp_cron=1762630831.0358099937438964843750 HTTP/1.1" 200 0 "https://smt.goodface.com.ua/wp-cron.php?doing_wp_cron=1762630831.0358099937438964843750" "WordPress/5.6.16; https://smt.goodface.com.ua" 216.73.216.140 - - [08/Nov/2025:14:40:31 -0500] "GET /robots.txt HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.140 - - [08/Nov/2025:14:40:33 -0500] "GET /robots.txt HTTP/2.0" 200 55 "https://www.smt.goodface.com.ua/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 68.183.9.16 - - [08/Nov/2025:15:42:36 -0500] "GET / HTTP/1.1" 499 0 "-" "-" 185.156.42.209 - - [08/Nov/2025:15:42:36 -0500] "POST /wp-cron.php?doing_wp_cron=1762634556.7455120086669921875000 HTTP/1.1" 200 0 "https://smt.goodface.com.ua/wp-cron.php?doing_wp_cron=1762634556.7455120086669921875000" "WordPress/5.6.16; https://smt.goodface.com.ua" 68.183.9.16 - - [08/Nov/2025:15:42:38 -0500] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA022971) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3114.98 Mobile Safari/537.3" 68.183.9.16 - - [08/Nov/2025:15:42:39 -0500] "POST /graphql HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:40 -0500] "POST /api HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:41 -0500] "POST /api/graphql HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:42 -0500] "POST /graphql/api HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:43 -0500] "POST /api/gql HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:44 -0500] "GET /swagger-ui.html HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:45 -0500] "GET /swagger/index.html HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:46 -0500] "GET /swagger/swagger-ui.html HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:47 -0500] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:47 -0500] "GET /swagger.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:48 -0500] "GET /swagger/v1/swagger.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:49 -0500] "GET /v2/api-docs HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:50 -0500] "GET /v3/api-docs HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:51 -0500] "GET /api-docs/swagger.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:52 -0500] "GET /api/swagger.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:42:53 -0500] "GET /@vite/env HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:54 -0500] "GET /actuator/env HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:55 -0500] "GET /server HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:56 -0500] "GET /.vscode/sftp.json HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:57 -0500] "GET /about HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:58 -0500] "GET /debug/default/view?panel=config HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:59 -0500] "GET /v2/_catalog HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:42:59 -0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:00 -0500] "GET /server-status HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:01 -0500] "GET /login.action HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:02 -0500] "GET /_all_dbs HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.930323e22343e2635313e2538313; +https://leakix.net)" 68.183.9.16 - - [08/Nov/2025:15:43:03 -0500] "GET /.DS_Store HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:04 -0500] "GET /.env HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:05 -0500] "GET /.git/config HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:05 -0500] "GET /s/930323e22343e2635313e2538313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:06 -0500] "GET /config.json HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:07 -0500] "GET /telescope/requests HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:08 -0500] "GET /info.php HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 68.183.9.16 - - [08/Nov/2025:15:43:09 -0500] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 304 "-" "Go-http-client/1.1" 205.210.31.164 - - [08/Nov/2025:16:12:06 -0500] "GET /wp-login.php HTTP/1.1" 200 10198 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"