­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 2a03:2880:16ff:13:: - - [28/Jul/2026:12:11:23 +0000] "GET /meta.json?bypass_otp=1&utm_source=Instagram&utm_campaign=RayaNovOffer2025&formtype=cash HTTP/1.1" 200 20 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2001:16a2:fa09:cc00:9c8:709c:62e9:ab60 - - [28/Jul/2026:13:29:54 +0000] "GET /lead-form-ar/39/?bypass_otp=1&utm_source=TikTok&utm_campaign=ElantraBTS2025&car_id=134&formtype=installment&ttclid=E_C_P_CuUBRJzFFO9s7em10WzUWKTvB5iy4le9tZTo2_gZT0YzidxD5kN9l36DwJBzlQKJiBiBUdGZlGgw9jZUmWTKrMxDIgtSOH-nQqDFMUZzUl5W8KNenOgLFk1bVrTgf5DHJms_-dysTMCo1pC-V94PG4j4kFMWj6hoSvdkWFFx_irIaauX24p_Aq-2Esvuk62palOPjH-TqB-YOlcklqz5EKRGyliJP8ZVZdukHNQ1oZ8r2d-9y1wP4giB88HxqJecTuakHA2wd6Al4XRQpw6wh29KivfLVb3lrIhzkyVx-aTrP3p1sxvuyxIEdjIuMA HTTP/1.1" 200 7818 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.7.5 Mobile/15E148 Safari/604.1" 2001:16a2:fa09:cc00:9c8:709c:62e9:ab60 - - [28/Jul/2026:13:29:58 +0000] "GET /favicon.ico HTTP/1.1" 200 20 "https://specialoffers.autozone.com.sa/lead-form-ar/39/?bypass_otp=1&utm_source=TikTok&utm_campaign=ElantraBTS2025&car_id=134&formtype=installment&ttclid=E_C_P_CuUBRJzFFO9s7em10WzUWKTvB5iy4le9tZTo2_gZT0YzidxD5kN9l36DwJBzlQKJiBiBUdGZlGgw9jZUmWTKrMxDIgtSOH-nQqDFMUZzUl5W8KNenOgLFk1bVrTgf5DHJms_-dysTMCo1pC-V94PG4j4kFMWj6hoSvdkWFFx_irIaauX24p_Aq-2Esvuk62palOPjH-TqB-YOlcklqz5EKRGyliJP8ZVZdukHNQ1oZ8r2d-9y1wP4giB88HxqJecTuakHA2wd6Al4XRQpw6wh29KivfLVb3lrIhzkyVx-aTrP3p1sxvuyxIEdjIuMA" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.7.5 Mobile/15E148 Safari/604.1" 2a03:2880:16ff:2:: - - [28/Jul/2026:13:37:48 +0000] "GET /meta.json?bypass_otp=1&utm_source=Facebook&utm_campaign=BTSIPAD2025&formtype=installment HTTP/1.1" 200 20 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2a03:2880:f800:2a:: - - [28/Jul/2026:14:13:41 +0000] "GET /generate-vcf/?name=%D9%85%D8%AD%D9%85%D8%AF+%D8%AC%D8%A8%D8%B1&phone=--sanitized--&location=http%3A%2F%2F2az.me%2FX77&text=https%3A%2F%2Fwa.me%2F--sanitized-S228802-- HTTP/1.1" 200 155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 207.46.13.170 - - [28/Jul/2026:14:19:12 +0000] "GET /assets/Ramadan-Cash-Offer/1-4.jpg HTTP/1.1" 200 11904972 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 216.73.217.135 - - [28/Jul/2026:14:25:18 +0000] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.217.135 - - [28/Jul/2026:14:25:33 +0000] "GET /generate-vcf/ HTTP/1.1" 200 127 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 66.249.73.198 - - [28/Jul/2026:14:45:17 +0000] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.73.197 - - [28/Jul/2026:14:45:18 +0000] "GET /favicon.ico HTTP/1.1" 200 20 "-" "Googlebot-Image/1.0" 62.238.54.16 - - [28/Jul/2026:14:52:22 +0000] "GET /assets/summer-2025-installment-offer/4.jpg HTTP/1.1" 200 9493360 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0" 195.178.110.223 - - [28/Jul/2026:15:24:06 +0000] "GET / HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:07 +0000] "GET / HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:07 +0000] "GET /%22/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js%22 HTTP/1.1" 404 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:08 +0000] "GET /gtm.js HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:08 +0000] "GET /.env HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:08 +0000] "GET /.env.bak HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:08 +0000] "GET /.env.save HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:08 +0000] "GET /.env.backup HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:09 +0000] "GET /backend/.env HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:09 +0000] "GET /admin/.env HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:09 +0000] "GET /.git/config HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:10 +0000] "GET /config.js HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:10 +0000] "GET /aws-config.js HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:10 +0000] "GET /aws.config.js HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:10 +0000] "GET /_debugbar/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:11 +0000] "GET /debugbar/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:11 +0000] "GET /debug/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:11 +0000] "GET /phpinfo.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [28/Jul/2026:15:24:12 +0000] "GET /info.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [28/Jul/2026:15:24:12 +0000] "GET /test.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 207.46.13.154 - - [28/Jul/2026:16:16:11 +0000] "GET /lead-form-ar/44/?car_id=176&formtype=cash HTTP/1.1" 200 7642 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 2a03:2880:10ff:5f:: - - [28/Jul/2026:16:37:53 +0000] "GET /meta.json?bypass_otp=1&utm_source=Instagram&utm_campaign=DealsNovOffer2025&formtype=cash&city_id=Riyadh HTTP/1.1" 200 20 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 207.46.13.83 - - [28/Jul/2026:17:00:23 +0000] "GET /lead-form/42/?car_id=156&formtype=cash HTTP/1.1" 200 6780 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 188.54.130.112 - - [28/Jul/2026:17:04:29 +0000] "GET /cnp/?utm_source=tiktok&utm_medium=CPC&utm_campaign=cnp-Sep2025&utm_id=1842775802686689&lpt=1&ttclid=E.C.P.Cs0BcD5hVKULRLAIX6S8OngGB1r2TvIlbZGxVVlHbi4KVy_yWok_UU1IsROHHILAndUdNQY98oB3ZmO0bk-kcFAfoz9ylsMrQVh1JJyYLpl-ZcJJ6osJb9SFNltousRisfGpjJYltM-uPO7JCh6k92aTU2PRBUo5Wb90ho4kpMNJ1s0YGungIOE7hgDR87YuUnGNNAkHA7RKWZKbQnQNtIbSBvmVxcBjzjBy6wzMyHz7u2EPQ0b_Ck7d_eRSoIORJQXW97Se11cVLHQfuHx6vBIEdjIuMBogvZgYYnzmG5TY6IP0sp_GAa1Kyh1sDlq9e6UtKTJwz6g HTTP/1.1" 200 2401 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/30.0 Chrome/143.0.0.0 Mobile Safari/537.36" 188.54.130.112 - - [28/Jul/2026:17:04:42 +0000] "GET /favicon.ico HTTP/1.1" 200 20 "https://specialoffers.autozone.com.sa/cnp/?utm_source=tiktok&utm_medium=CPC&utm_campaign=cnp-Sep2025&utm_id=1842775802686689&lpt=1&ttclid=E.C.P.Cs0BcD5hVKULRLAIX6S8OngGB1r2TvIlbZGxVVlHbi4KVy_yWok_UU1IsROHHILAndUdNQY98oB3ZmO0bk-kcFAfoz9ylsMrQVh1JJyYLpl-ZcJJ6osJb9SFNltousRisfGpjJYltM-uPO7JCh6k92aTU2PRBUo5Wb90ho4kpMNJ1s0YGungIOE7hgDR87YuUnGNNAkHA7RKWZKbQnQNtIbSBvmVxcBjzjBy6wzMyHz7u2EPQ0b_Ck7d_eRSoIORJQXW97Se11cVLHQfuHx6vBIEdjIuMBogvZgYYnzmG5TY6IP0sp_GAa1Kyh1sDlq9e6UtKTJwz6g" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/30.0 Chrome/143.0.0.0 Mobile Safari/537.36" 35.205.92.76 - - [28/Jul/2026:17:53:40 +0000] "GET / HTTP/1.1" 200 1737 "-" "python-requests/2.32.5" 32.193.54.150 - - [28/Jul/2026:18:10:32 +0000] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"