["2026-05-09 00:59:46","192.253.248.169","HEAD","\/index.php?file=..\/..\/..\/..\/..\/..\/..\/..\/root\/.aws\/credentials","Mozilla\/5.0 (Windows NT 10.0; WOW64; Trident\/7.0; NMTE; rv:11.0) like Gecko","args","\\.\\.\/\\.\\.\/ >> file:..\/..\/..\/..\/..\/..\/..\/..\/root\/.aws\/credentials","HEAD \/index.php?file=..\/..\/..\/..\/..\/..\/..\/..\/root\/.aws\/credentials HTTP\/1.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.5\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; WOW64; Trident\/7.0; NMTE; rv:11.0) like Gecko\n\n"]
["2026-05-09 13:01:18","192.253.248.169","GET","\/.env.bak","Mozilla\/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/.env.bak","GET \/.env.bak HTTP\/1.1\nhost:47.254.126.238\naccept-language:en-US,en;q=0.5\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.php.bak","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php.bak","GET \/wp-config.php.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.php.old","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php.old","GET \/wp-config.php.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.bak","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.bak","GET \/wp-config.bak HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.php~","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.php~","GET \/wp-config.php~ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.old","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/wp-config.old","GET \/wp-config.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]
["2026-05-09 18:44:28","151.243.150.23","GET","\/wp-config.old","Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)","url","60秒以内累计超过6次以上非法请求,封锁180秒","GET \/wp-config.old HTTP\/1.1\nuser-agent:Mozilla\/5.0 (compatible; Googlebot\/2.1; +http:\/\/www.google.com\/bot.html)\naccept:*\/*\nhost:47.254.126.238\naccept-encoding:gzip\n\n"]