# logs for requests coming from: 216.73.217.124
# 2026-04-30T11:31:27+00:00

# logformat:
	log_format logformat '"$remote_addr" "$remote_user" "$time_local" '
		'"$request" "$status" "$body_bytes_sent" '
		'"$http_referer" "$http_user_agent" '
		'"$bytes_sent" "$scheme" "$host" '
		'"$request_time" "$upstream_response_time" "$request_length" "$http_range" '
		'"$upstream_cache_status" "$gc_upstream_response_length" "$upstream_addr" '
		'"$http_ssl_ja3" "$http_ssl_ja3_hash" "$uid_got" "$uid_set" '
		'"$server_port" '
		'"$upstream_status" "$upstream_connect_time" "$upstream_header_time" '
		'"$pid" "$connection" "$connection_requests" '
		'"$http_traceparent" "$http_x_forwarded_proto" '
		'"$ssl_cipher" "$ssl_session_id" "$ssl_session_reused" "$sent_http_content_type" '
		'"$gcdn_tcpinfo_rtt" "$server_country_code" "$gcdn_tcpinfo_rwnd_limited_percent" "$gcdn_tcpinfo_bytes_retrans"';

== /var/log/nginx/access.log.1 ==
"216.73.217.124" "-" "30/Apr/2026:10:21:15 +0000" "GET /robots.txt HTTP/1.1" "200" "66" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "272" "https" "pwnrzclb.net" "0.000" "-" "220" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335284" "45518" "1" "-" "-" "TLS_AES_256_GCM_SHA384" "c443b98125cc5be3385a09393b39a51ba8a87a73336a56819ce49dc05e9b717f" "." "text/plain" "-" "-" "-" "-"
"216.73.217.124" "-" "30/Apr/2026:10:21:15 +0000" "GET / HTTP/1.1" "200" "560" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "867" "https" "pwnrzclb.net" "0.000" "-" "210" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335284" "45518" "2" "-" "-" "TLS_AES_256_GCM_SHA384" "c443b98125cc5be3385a09393b39a51ba8a87a73336a56819ce49dc05e9b717f" "." "text/html" "-" "-" "-" "-"
"216.73.217.124" "-" "30/Apr/2026:11:28:38 +0000" "GET /robots.txt HTTP/1.1" "200" "66" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "272" "https" "pwnrzclb.net" "0.000" "-" "220" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335285" "45570" "1" "-" "-" "TLS_AES_256_GCM_SHA384" "e181495466fde99dcce2790790432cf631f3f14184f2ff1d6b5f96f14b56fe27" "." "text/plain" "-" "-" "-" "-"
"216.73.217.124" "-" "30/Apr/2026:11:28:38 +0000" "GET /redlines HTTP/1.1" "200" "357" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "664" "https" "pwnrzclb.net" "0.000" "-" "218" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335285" "45570" "2" "-" "-" "TLS_AES_256_GCM_SHA384" "e181495466fde99dcce2790790432cf631f3f14184f2ff1d6b5f96f14b56fe27" "." "text/html" "-" "-" "-" "-"
"216.73.217.124" "-" "30/Apr/2026:11:31:26 +0000" "GET /flamegraphs/ HTTP/1.1" "200" "1418" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "1655" "https" "pwnrzclb.net" "0.000" "-" "222" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335285" "45572" "1" "-" "-" "TLS_AES_256_GCM_SHA384" "540fda3eb676dc6dd915af261e371f4f03d09f713d93a087a8bd9c23ff9c6bee" "." "text/html" "-" "-" "-" "-"
"216.73.217.124" "-" "30/Apr/2026:11:31:26 +0000" "GET /blog HTTP/1.1" "200" "5107" "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "5415" "https" "pwnrzclb.net" "0.000" "-" "214" "-" "-" "-" "-" "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0" "24dd0f987266c37f39231f6f2130d12e" "-" "-" "443" "-" "-" "-" "2335285" "45572" "2" "-" "-" "TLS_AES_256_GCM_SHA384" "540fda3eb676dc6dd915af261e371f4f03d09f713d93a087a8bd9c23ff9c6bee" "." "text/html" "-" "-" "-" "-"

== /var/log/nginx/ssl.log.1 ==
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 accept: 216.73.217.124:38702 fd:22
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 event timer add: 22: 60000:9163636486
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 reusable connection: 1
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 epoll add event: fd:22 op:1 ev:80002001
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 http check ssl handshake
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 http recv(): 1
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 https ssl handshake: 0x16
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 tcp_nodelay
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 posix_memalign: 000065504B35BA00:512 @16
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 reusable connection: 0
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 ssl client hello: connection reusable: 0
2026/04/30 10:21:15 [debug] 2335284#2335284: *45518 SSL server name: "pwnrzclb.net"
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 accept: 216.73.217.124:56673 fd:3
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 event timer add: 3: 60000:9167679717
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 reusable connection: 1
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 epoll add event: fd:3 op:1 ev:80002001
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 http check ssl handshake
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 http recv(): 1
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 https ssl handshake: 0x16
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 tcp_nodelay
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 posix_memalign: 000065504D6E3400:512 @16
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 reusable connection: 0
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 ssl client hello: connection reusable: 0
2026/04/30 11:28:38 [debug] 2335285#2335285: *45570 SSL server name: "pwnrzclb.net"
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 accept: 216.73.217.124:24526 fd:3
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 event timer add: 3: 60000:9167847430
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 reusable connection: 1
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 epoll add event: fd:3 op:1 ev:80002001
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 http check ssl handshake
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 http recv(): 1
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 https ssl handshake: 0x16
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 tcp_nodelay
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 posix_memalign: 000065504D6E2400:512 @16
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 reusable connection: 0
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 ssl client hello: connection reusable: 0
2026/04/30 11:31:26 [debug] 2335285#2335285: *45572 SSL server name: "pwnrzclb.net"
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 accept: 216.73.217.124:43155 fd:3
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 event timer add: 3: 60000:9167848646
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 reusable connection: 1
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 epoll add event: fd:3 op:1 ev:80002001
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 http check ssl handshake
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 http recv(): 1
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 https ssl handshake: 0x16
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 tcp_nodelay
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 posix_memalign: 000065504D673E00:512 @16
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 reusable connection: 0
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 ssl client hello: connection reusable: 0
2026/04/30 11:31:27 [debug] 2335286#2335286: *45574 SSL server name: "pwnrzclb.net"