whoami7 - Manager
:
/
home
/
techyfnq
/
access-logs
/
Upload File:
files >> //home/techyfnq/access-logs/mailer.techinfrareviews.com
38.18.24.104 - - [03/Mar/2026:07:14:40 -0500] "HEAD /images HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.35/36 Safari/537.36" 43.157.38.131 - - [03/Mar/2026:07:44:29 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.74.73 - - [03/Mar/2026:08:06:59 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.105.82.111 - - [03/Mar/2026:08:36:36 -0500] "GET /mailer.b2bmarketingreviews.net_1-April-25.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:31 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /Newsletters/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /mailer.segnant.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /classes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:00:38 -0500] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /PHPMailer/vendor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /PHPMailer/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /PHPMailer/language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /Newsletters/april/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /includes/amline/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /includes/ampie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:06 -0500] "GET /includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:01:07 -0500] "GET /test/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /PHPMailer/vendor/composer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /PHPMailer/vendor/phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /includes/amline/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /includes/amline/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /includes/ampie/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /test/PHPMailer/extras/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:02:44 -0500] "GET /test/PHPMailer/language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.105.82.111 - - [03/Mar/2026:09:04:48 -0500] "GET /PHPMailer/vendor/phpmailer/phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 43.167.232.38 - - [03/Mar/2026:10:48:29 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.41.168 - - [03/Mar/2026:10:49:41 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:41 -0500] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:41 -0500] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:41 -0500] "GET /wp-scxy.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:42 -0500] "GET /ccou1.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:42 -0500] "GET /wp-the1.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:10:49:42 -0500] "GET /reyna.php HTTP/1.1" 301 795 "-" "-" 159.89.197.248 - - [03/Mar/2026:11:22:41 -0500] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:22:41 -0500] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:22:41 -0500] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:22:41 -0500] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:22:41 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:36 -0500] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:36 -0500] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:36 -0500] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:36 -0500] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:36 -0500] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:42 -0500] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:42 -0500] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:42 -0500] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:42 -0500] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:42 -0500] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /ae.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:45 -0500] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:40 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:40 -0500] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:40 -0500] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:40 -0500] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:40 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:51 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:51 -0500] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:51 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:51 -0500] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:51 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:00 -0500] "GET /crack_self_restore.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:00 -0500] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:00 -0500] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:00 -0500] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:00 -0500] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:46 -0500] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:46 -0500] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:46 -0500] "GET /pinuseren.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:46 -0500] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:46 -0500] "GET /heada.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:58 -0500] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:58 -0500] "GET /jiema.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:58 -0500] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:58 -0500] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:58 -0500] "GET /wp-site.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:19 -0500] "GET /cytox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:19 -0500] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:19 -0500] "GET /63ck0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:19 -0500] "GET /wp-content/uploads/mfw-activity-logger/csv-uploads/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:19 -0500] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:21 -0500] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:21 -0500] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:21 -0500] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:21 -0500] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:21 -0500] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:11 -0500] "GET /ak74.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:11 -0500] "GET /cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:11 -0500] "GET /anon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:11 -0500] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:11 -0500] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp-access.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /ets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /ninja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /0byt3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /nsts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /an0nmini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:33 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:33 -0500] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:33 -0500] "GET /foxwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:33 -0500] "GET /nn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:33 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /00.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /foxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /wawe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /js.php?get HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /wp-email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:34 -0500] "GET /wp-booking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /fierza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /wp-content/themes/fitnessbase/crp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /lock360.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:36 -0500] "GET /01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:37 -0500] "GET /.well-known/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:37 -0500] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:37 -0500] "GET /ciis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:37 -0500] "GET /0o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:37 -0500] "GET /zfox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /zf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /xd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /adriv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /tonant.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /4mosan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /wp-content/flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /block-patwp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /wp-key.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /wp-conctent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /991176.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /ffAA531.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /bre.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:39 -0500] "GET /wp-help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:40 -0500] "GET /un.php?f=f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:40 -0500] "GET /un2.php?f=f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:40 -0500] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:40 -0500] "GET /ww.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:40 -0500] "GET /wp-posts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /kyami.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /testwp.php?wp=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /1975.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /wp-includes/class-wp-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /unknown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /god4m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /shl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:42 -0500] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /hi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/noriumportfolio/img_screen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/noriumportfolio/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/noriumportfolio/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/themes/noriumportfolio/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:45 -0500] "GET /wp-content/themes/skatepark/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:45 -0500] "GET /wp-content/themes/skatepark/img_screen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:45 -0500] "GET /wp-content/themes/skatepark/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:45 -0500] "GET /wp-content/themes/skatepark/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:45 -0500] "GET /wp-content/plugins/db/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/ndak/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/ndak/marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/themes/wp-pridmag/22x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/themes/workart/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/cache-wordpress/wp-activates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/cekidot/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/plugins/cekidot/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /wp-content/themes/workart/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:47 -0500] "GET /wp-content/themes/theme/gr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:47 -0500] "GET /wp-content/themes/pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:47 -0500] "GET /wp-content/themes/jobart/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:47 -0500] "GET /wp-content/themes/cepair/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:47 -0500] "GET /wp-content/themes/jobart/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:48 -0500] "GET /wp-content/themes/cakiltheme/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:48 -0500] "GET /wp-content/themes/wp-pridmag/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:48 -0500] "GET /wp-content/themes/cakiltheme/idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:48 -0500] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:48 -0500] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /wp-content/themes/rishi/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /wp-content/themes/rishi/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /wp-content/plugins/virr/v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:51 -0500] "GET /wp-content/plugins/db/uploader.php?uploader HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:51 -0500] "GET /wp-content/plugins/wp-freeform/wawe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:51 -0500] "GET /wp-content/plugins/wp-freeform/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:51 -0500] "GET /wp-content/plugins/virr/uploader.php?uploader HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:51 -0500] "GET /wp-content/plugins/wp-freeform/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:52 -0500] "GET /r00t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:52 -0500] "GET /galekjaya.php?raimu=tgl99 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:52 -0500] "GET /?loadme HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:52 -0500] "GET /radio.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:52 -0500] "GET /Xzd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:54 -0500] "GET /local.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:54 -0500] "GET /wikindex.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:54 -0500] "GET /2index.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:54 -0500] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:54 -0500] "GET /1index.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-inlcudes.php?katib HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-admin/includes/1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-backup-sql-302.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-js.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-load.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:56 -0500] "GET /0x0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:56 -0500] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:56 -0500] "GET /0z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:56 -0500] "GET /1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:56 -0500] "GET /1975.php?CVE=2022 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /1975.php?CVE=2021 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /45.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /4x4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /73.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:57 -0500] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /alf4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /alfa-shell-v4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /alfakun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:59 -0500] "GET /alfatesla.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:59 -0500] "GET /alfateslav4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:59 -0500] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:59 -0500] "GET /anjay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:59 -0500] "GET /anons79.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:00 -0500] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:00 -0500] "GET /batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:00 -0500] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:00 -0500] "GET /bj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:00 -0500] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /bypas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:02 -0500] "GET /codeboy1877x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:02 -0500] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:02 -0500] "GET /ccaef.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:02 -0500] "GET /chitoge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:02 -0500] "GET /con.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:03 -0500] "GET /con7ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:03 -0500] "GET /con7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:03 -0500] "GET /dbx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:03 -0500] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:03 -0500] "GET /degeselih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /docindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /dosya.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /Dz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /error.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /evil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /FoxWSO-full.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /id.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /ids.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:05 -0500] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:07 -0500] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:07 -0500] "GET /kepo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:07 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:07 -0500] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:07 -0500] "GET /kndw1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /lolzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /lnedx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /mas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /minik.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /mclash.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /mi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:08 -0500] "GET /min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /minishell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:10 -0500] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:10 -0500] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:10 -0500] "GET /postfs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:10 -0500] "GET /pref.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:10 -0500] "GET /priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:11 -0500] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:11 -0500] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:11 -0500] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:11 -0500] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:11 -0500] "GET /rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /tes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /tesla.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /tshop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /teslav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:13 -0500] "GET /twin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:14 -0500] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:14 -0500] "GET /usb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:14 -0500] "GET /usr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:14 -0500] "GET /utchiha.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:14 -0500] "GET /v3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /v4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-defaul.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-mails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-pluging.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:16 -0500] "GET /wp-singupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-title.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-we.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wpindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /xcv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:18 -0500] "GET /xidcm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:19 -0500] "GET /xm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:19 -0500] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:19 -0500] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:19 -0500] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:19 -0500] "GET /y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /zx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /zk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /zone.php?phpshell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:21 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:21 -0500] "GET /9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:21 -0500] "GET /6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:21 -0500] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:21 -0500] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:22 -0500] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:22 -0500] "GET /f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:22 -0500] "GET /q.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:22 -0500] "GET /d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:22 -0500] "GET /g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /777.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:24 -0500] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:24 -0500] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:24 -0500] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:24 -0500] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:24 -0500] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /if.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:25 -0500] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /500.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /406.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /sh3ll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /IndoXploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:27 -0500] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:28 -0500] "GET /123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:28 -0500] "GET /_.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:28 -0500] "GET /wps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:28 -0500] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:28 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /1877x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /green.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:30 -0500] "GET /radio.PHP56 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:30 -0500] "GET /xleet.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:30 -0500] "GET /wp-.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:30 -0500] "GET /radio.PHP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:30 -0500] "GET /wp-about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /ws0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /xt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /a1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /b374k.php5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /axshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /fz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /exploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:32 -0500] "GET /mad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:32 -0500] "GET /fg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:32 -0500] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:32 -0500] "GET /r57.php5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:32 -0500] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /sh3lls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /m.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /wso403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /0day.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /byp403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:33 -0500] "GET /up.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /6s6s6s6s6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /fox.PHP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /Fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /anonsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /byp7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /bypp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /administrator.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /wp-includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:35 -0500] "GET /seo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:36 -0500] "GET /tmp/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:36 -0500] "GET /tmp/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:36 -0500] "GET /tmp/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:36 -0500] "GET /tmp/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:36 -0500] "GET /tmp/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /tmp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /.well-known/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /.tmb/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /tmp/Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/l10n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/Text/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/class-IXR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/css/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:38 -0500] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp-includes/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp-includes/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/pomo/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:40 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /includes/wp-admin/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:41 -0500] "GET /wp-admin/user/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-admin/images/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-admin/plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /cgi-bin/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-content/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:43 -0500] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:43 -0500] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:43 -0500] "GET /wp-admin/wp-apxupx.php?apx=upxs HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:43 -0500] "GET /wp-content/duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:43 -0500] "GET /wp-includes/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/wp-diff.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/w3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/css/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:45 -0500] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:46 -0500] "GET /wp-admin/b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:46 -0500] "GET /wp-admin/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:46 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:46 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:46 -0500] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/f0x.ph HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/plugins/akismet/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:48 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/wpx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-content/uploads/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-admin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-content/themes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-content/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:49 -0500] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /eagle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:51 -0500] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /sad/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:53 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:54 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /.well-knownold/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:56 -0500] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 171.78.172.70 - - [03/Mar/2026:12:02:24 -0500] "HEAD /images HTTP/1.1" 301 0 "-" "python-requests/2.32.3"
Copyright ©2021 || Defacer Indonesia