whoami7 - Manager
:
/
home
/
techyfnq
/
access-logs
/
Upload File:
files >> //home/techyfnq/access-logs/techinfrareviews.com
162.0.217.45 - - [03/Mar/2026:07:48:40 -0500] "POST /wp-cron.php?doing_wp_cron=1772542120.1185350418090820312500 HTTP/1.1" 301 795 "-" "WordPress/6.9; https://techinfrareviews.com" 20.203.176.192 - - [03/Mar/2026:07:48:37 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:40 -0500] "GET /gfile.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:40 -0500] "GET /eee.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:41 -0500] "GET /lp6.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:41 -0500] "GET /rere.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:42 -0500] "GET /lanka.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:42 -0500] "GET /69R8Rs.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:43 -0500] "GET /zzxy.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:43 -0500] "GET /cs.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:44 -0500] "GET /xnty.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:45 -0500] "GET /w2025.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:45 -0500] "GET /foxr.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:46 -0500] "GET /xv23.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:46 -0500] "GET /swallowable.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:47 -0500] "GET /claw.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:47 -0500] "GET /fvvff.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:48 -0500] "GET /a2.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:48 -0500] "GET /sty.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:49 -0500] "GET /xxxx.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:49 -0500] "GET //h.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:49 -0500] "GET /h.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:50 -0500] "GET /g.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:50 -0500] "GET /pp.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:51 -0500] "GET //sys.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:51 -0500] "GET /sys.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:52 -0500] "GET /txets.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:52 -0500] "GET /tt.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:53 -0500] "GET /wp9.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:53 -0500] "GET /path.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:54 -0500] "GET /wdf.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:54 -0500] "GET //2.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:55 -0500] "GET /2.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:55 -0500] "GET /mga.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:56 -0500] "GET /maxro.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:57 -0500] "GET /agg.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:57 -0500] "GET /pass4.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:58 -0500] "GET /wsvvs.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:58 -0500] "GET /G-In.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:59 -0500] "GET //edit.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:48:59 -0500] "GET /edit.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:00 -0500] "GET /ioxi-o.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:00 -0500] "GET /wp-content/admin.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:01 -0500] "GET /66.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:01 -0500] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 200 1979 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:01 -0500] "GET /gifclass.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:02 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:02 -0500] "GET /wp-includes/assets/ HTTP/1.1" 200 4626 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:02 -0500] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:03 -0500] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 404 74181 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:03 -0500] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 200 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:03 -0500] "GET //assets/css/index.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:04 -0500] "GET /assets/css/ HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:04 -0500] "GET /sc.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:05 -0500] "GET /xmlrpc.php HTTP/1.1" 405 42 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:05 -0500] "GET /ol.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:06 -0500] "GET //f6.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:06 -0500] "GET /f6.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:07 -0500] "GET //inputs.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:07 -0500] "GET /inputs.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:08 -0500] "GET /style.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:08 -0500] "GET /bgymj.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:09 -0500] "GET //aa.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:09 -0500] "GET /aa.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:10 -0500] "GET //1.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:10 -0500] "GET /1.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:11 -0500] "GET //sc.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:11 -0500] "GET /sc.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:11 -0500] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:12 -0500] "GET /av.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:12 -0500] "GET /file.php? HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:13 -0500] "GET /666.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:13 -0500] "GET /file59.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:14 -0500] "GET /bless.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:14 -0500] "GET /wp9.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:15 -0500] "GET /wp-act.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:15 -0500] "GET /class-t.api.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:16 -0500] "GET /xqq.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:16 -0500] "GET /wp-admin/css/bolt.php HTTP/1.1" 404 74180 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:17 -0500] "GET /a.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:17 -0500] "GET /a.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:18 -0500] "GET /06.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:18 -0500] "GET /plss3.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:19 -0500] "GET /aaa.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:19 -0500] "GET /aaa.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:20 -0500] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:20 -0500] "GET /classwithtostring.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:20 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:20 -0500] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:21 -0500] "GET /tinyfilemanager.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:21 -0500] "GET //x.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:22 -0500] "GET /x.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:22 -0500] "GET /ms.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:23 -0500] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:23 -0500] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 74180 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:23 -0500] "GET /wdf.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:24 -0500] "GET /wp-update.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:25 -0500] "GET /sbhu.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:25 -0500] "GET /x/ HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:26 -0500] "GET /wp-blog.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:26 -0500] "GET /test1.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:27 -0500] "GET //wp-includes/js/jquery/ HTTP/1.1" 200 7351 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:27 -0500] "GET /166.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:27 -0500] "GET /fleen.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:28 -0500] "GET /fleen.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:28 -0500] "GET //wp-content/admin.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:28 -0500] "GET /wp-content/admin.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:29 -0500] "GET /ms-edit.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:29 -0500] "GET //adminfuns.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:30 -0500] "GET /adminfuns.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:30 -0500] "GET /goods.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:30 -0500] "GET /ms-edit.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:31 -0500] "GET /222.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:32 -0500] "GET /plugins.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:32 -0500] "GET /plugins.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:32 -0500] "GET //cgi-bin/index.php HTTP/1.1" 404 1251 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:32 -0500] "GET //wp-includes/js/dist/ HTTP/1.1" 200 37098 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:32 -0500] "GET /ff1.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:33 -0500] "GET /fff.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:33 -0500] "GET /wp-content/ HTTP/1.1" 200 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:33 -0500] "GET /goat.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:34 -0500] "GET /155.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:34 -0500] "GET /we.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:35 -0500] "GET /alpha.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:35 -0500] "GET /makeasmtp.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:36 -0500] "GET /makeasmtp.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:36 -0500] "GET /wp-michan.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:37 -0500] "GET //wp-content/cong.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:37 -0500] "GET /wp-content/cong.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:37 -0500] "GET /wp-the.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:38 -0500] "GET //wp-includes/css/dist/ HTTP/1.1" 200 6926 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:38 -0500] "GET /BDKR28WP.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:38 -0500] "GET //wp-includes/l10n/ HTTP/1.1" 200 3838 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:38 -0500] "GET /wp.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:39 -0500] "GET //assets/css/index.php?p= HTTP/1.1" 301 0 "-" "-" 162.0.217.45 - - [03/Mar/2026:07:49:40 -0500] "POST /wp-cron.php?doing_wp_cron=1772542180.2393789291381835937500 HTTP/1.1" 301 795 "-" "WordPress/6.9; https://techinfrareviews.com" 20.203.176.192 - - [03/Mar/2026:07:49:39 -0500] "GET /assets/css/ HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:40 -0500] "GET /w4.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:40 -0500] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:41 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 6091 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:41 -0500] "GET /ok.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:41 -0500] "GET //about.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:42 -0500] "GET /about.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:42 -0500] "GET /tymn.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:42 -0500] "GET /tymn.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:43 -0500] "GET //bak.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:43 -0500] "GET /bak.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:44 -0500] "GET /wp-admin/js/fi.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:44 -0500] "GET /fe5.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:45 -0500] "GET /kj.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:45 -0500] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:46 -0500] "GET /wp-content/uploads/2021/02/ HTTP/1.1" 404 74181 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:46 -0500] "GET /av.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:47 -0500] "GET /abcd.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:47 -0500] "GET /init.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:48 -0500] "GET /fi.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:48 -0500] "GET //a1.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:49 -0500] "GET /a1.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:49 -0500] "GET /update/f35.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:50 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:50 -0500] "GET /f35.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:50 -0500] "GET /hi.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:51 -0500] "GET //lala.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:51 -0500] "GET /lala.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:52 -0500] "GET /lb.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:52 -0500] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:53 -0500] "GET /wp-includes/css/ HTTP/1.1" 200 14043 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:53 -0500] "GET /0.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:53 -0500] "GET /core.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:54 -0500] "GET /autogooey.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:54 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 200 2127 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:54 -0500] "GET /prv8.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:55 -0500] "GET /k.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:55 -0500] "GET /dev.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:56 -0500] "GET /x123x.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:56 -0500] "GET /bal.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:57 -0500] "GET /in.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:57 -0500] "GET /gssdd.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:58 -0500] "GET /motu.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:59 -0500] "GET /bs1.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:59 -0500] "GET /bengi.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:49:59 -0500] "GET /miansha.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:00 -0500] "GET //erty.php HTTP/1.1" 301 0 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:00 -0500] "GET /erty.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:01 -0500] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 404 74179 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:01 -0500] "GET /X57.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:02 -0500] "GET /axx.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:02 -0500] "GET /alfashell.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:03 -0500] "GET /re.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:04 -0500] "GET /styll.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:05 -0500] "GET /flower.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:05 -0500] "GET /flower2.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:06 -0500] "GET /4h.php HTTP/1.1" 404 74177 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:07 -0500] "GET /gettest.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:09 -0500] "GET /acp.php HTTP/1.1" 404 74178 "-" "-" 20.203.176.192 - - [03/Mar/2026:07:50:09 -0500] "GET /database.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:17 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:18 -0500] "GET /alfa-rex.php7 HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:19 -0500] "GET //koiy.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:20 -0500] "GET /koiy.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:21 -0500] "GET /bes.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:21 -0500] "GET /a2.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:22 -0500] "GET /eauu.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:23 -0500] "GET //wp-includes/js/tinymce/themes/inlite HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:24 -0500] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 200 1974 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:24 -0500] "GET //h.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:24 -0500] "GET /h.php HTTP/1.1" 404 74178 "-" "-" 162.0.217.45 - - [03/Mar/2026:08:31:26 -0500] "POST /wp-cron.php?doing_wp_cron=1772544686.1147370338439941406250 HTTP/1.1" 301 795 "-" "WordPress/6.9; https://techinfrareviews.com" 20.220.232.240 - - [03/Mar/2026:08:31:25 -0500] "GET /myfile.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:26 -0500] "GET /sty.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:27 -0500] "GET /nzv.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:28 -0500] "GET /sadd.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:28 -0500] "GET /ae.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:29 -0500] "GET /wp-access.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:30 -0500] "GET /tmpls.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:31 -0500] "GET /xmy.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:32 -0500] "GET /g.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:33 -0500] "GET /rum.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:34 -0500] "GET /wp-good.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:36 -0500] "GET /wpver.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:37 -0500] "GET /error1.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:38 -0500] "GET /zz.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:39 -0500] "GET /avim.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:39 -0500] "GET /jq.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:40 -0500] "GET /guk.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:41 -0500] "GET /gool.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:42 -0500] "GET /motu.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:43 -0500] "GET /ws79.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:44 -0500] "GET /an7.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:45 -0500] "GET /clasa99.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:45 -0500] "GET /zxin.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:46 -0500] "GET /rtx.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:47 -0500] "GET /Okxob.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:47 -0500] "GET /ocxla.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:48 -0500] "GET //thui.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:48 -0500] "GET /thui.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:49 -0500] "GET /brc.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:50 -0500] "GET /koiy.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:50 -0500] "GET /wp-tem.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:51 -0500] "GET /Ov-Simple1.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:52 -0500] "GET /gfile.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:53 -0500] "GET /a1vx.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:53 -0500] "GET /ws62.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:54 -0500] "GET /public/wp-blog.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:55 -0500] "GET /scx.php7 HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:56 -0500] "GET /end.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:57 -0500] "GET /erty.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:31:59 -0500] "GET /zwq13.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:00 -0500] "GET /ebahvhhh.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:01 -0500] "GET /xqq.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:02 -0500] "GET /X7x.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:03 -0500] "GET /cxc.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:04 -0500] "GET /snq.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:05 -0500] "GET /bb.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:06 -0500] "GET /05.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:07 -0500] "GET /xleet.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:07 -0500] "GET /gec.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:08 -0500] "GET /maxro.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:09 -0500] "GET /ah25.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:10 -0500] "GET /opts.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:11 -0500] "GET /public/hi.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:12 -0500] "GET /222.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:13 -0500] "GET /ty.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:14 -0500] "GET /loxi-o.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:15 -0500] "GET /G-in.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:16 -0500] "GET /ccou.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:17 -0500] "GET /god.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:18 -0500] "GET /fff.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:20 -0500] "GET /xxx.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:21 -0500] "GET /post.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:22 -0500] "GET /wp-act.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:24 -0500] "GET //sys.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:25 -0500] "GET /sys.php HTTP/1.1" 404 74178 "-" "-" 162.0.217.45 - - [03/Mar/2026:08:32:27 -0500] "POST /wp-cron.php?doing_wp_cron=1772544747.1492469310760498046875 HTTP/1.1" 301 795 "-" "WordPress/6.9; https://techinfrareviews.com" 20.220.232.240 - - [03/Mar/2026:08:32:26 -0500] "GET /rpk.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:27 -0500] "GET /xda.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:28 -0500] "GET /666.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:30 -0500] "GET /ws61.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:31 -0500] "GET /mini.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:32 -0500] "GET /nw.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:33 -0500] "GET /fleen.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:34 -0500] "GET /autogooey.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:35 -0500] "GET /ex.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:36 -0500] "GET /iko.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:37 -0500] "GET /ze.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:38 -0500] "GET /moon.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:39 -0500] "GET /c4.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:40 -0500] "GET /f6.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:41 -0500] "GET /app.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:41 -0500] "GET /wp-admin/sc.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:42 -0500] "GET /grsiuk.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:43 -0500] "GET /new4.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:44 -0500] "GET /olfclass.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:45 -0500] "GET //ms.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:45 -0500] "GET /ms.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:46 -0500] "GET /pass4.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:47 -0500] "GET /wdf.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:47 -0500] "GET /pouhg.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:48 -0500] "GET /wqqs.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:49 -0500] "GET /kj.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:50 -0500] "GET /e.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:51 -0500] "GET /file52.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:52 -0500] "GET /z.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:53 -0500] "GET /thui.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:54 -0500] "GET /pp.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:55 -0500] "GET /gjm.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:56 -0500] "GET /ok.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:57 -0500] "GET //edit.php HTTP/1.1" 301 0 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:57 -0500] "GET /edit.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:58 -0500] "GET /agg.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:32:59 -0500] "GET /wp-blog.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:00 -0500] "GET /66.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:01 -0500] "GET /wp-freya.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:01 -0500] "GET /0.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:02 -0500] "GET /wp-admin/css/bolt.php HTTP/1.1" 404 74180 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:03 -0500] "GET /fasx.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:04 -0500] "GET /file59.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:05 -0500] "GET /cu.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:06 -0500] "GET /tax.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:07 -0500] "GET /public/vx.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:09 -0500] "GET /xa.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:10 -0500] "GET /ms-edit.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:11 -0500] "GET /sdsa.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:12 -0500] "GET /wsws.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:13 -0500] "GET /btx25.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:14 -0500] "GET /fun.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:15 -0500] "GET /vx.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:16 -0500] "GET /06.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:17 -0500] "GET /mga.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:18 -0500] "GET /X57.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:19 -0500] "GET /moon3.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:20 -0500] "GET /x7.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:21 -0500] "GET /sid3.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:22 -0500] "GET /mamzi.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:24 -0500] "GET /co.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:25 -0500] "GET /txets.php HTTP/1.1" 404 74178 "-" "-" 162.0.217.45 - - [03/Mar/2026:08:33:27 -0500] "POST /wp-cron.php?doing_wp_cron=1772544807.8053679466247558593750 HTTP/1.1" 301 795 "-" "WordPress/6.9; https://techinfrareviews.com" 20.220.232.240 - - [03/Mar/2026:08:33:26 -0500] "GET /tt.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:28 -0500] "GET /fs.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:28 -0500] "GET /ff1.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:29 -0500] "GET /wp9.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:30 -0500] "GET /nhr.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:31 -0500] "GET /mans.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:32 -0500] "GET /ms.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:33 -0500] "GET /forbidals.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:34 -0500] "GET /plugins.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:36 -0500] "GET /dom.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:37 -0500] "GET /8.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:38 -0500] "GET /wio.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:39 -0500] "GET /wp-conflg.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:40 -0500] "GET /wpo.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:41 -0500] "GET /bsg-management/php.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:42 -0500] "GET /get.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:44 -0500] "GET /path.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:47 -0500] "GET /fff.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:48 -0500] "GET /hello.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:50 -0500] "GET /wp-content/admin.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:51 -0500] "GET /raw.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:52 -0500] "GET /wp-the.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:54 -0500] "GET /sxdfrt.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:55 -0500] "GET /1061.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:56 -0500] "GET /ws59.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:58 -0500] "GET /166.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:33:59 -0500] "GET /vgtyu.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:00 -0500] "GET /100.kb.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:01 -0500] "GET /mcs.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:03 -0500] "GET /155.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:04 -0500] "GET /ws60.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:05 -0500] "GET /fr/ms.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:06 -0500] "GET /un.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:07 -0500] "GET /zc-318.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:08 -0500] "GET /wp5.php HTTP/1.1" 404 74179 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:09 -0500] "GET /byp8.php HTTP/1.1" 404 74178 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:09 -0500] "GET /sbhu.php HTTP/1.1" 404 74177 "-" "-" 20.220.232.240 - - [03/Mar/2026:08:34:10 -0500] "GET /dsd.php HTTP/1.1" 404 74179 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:05 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:07 -0500] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:07 -0500] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:09 -0500] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:10 -0500] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:11 -0500] "GET /lanka.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:12 -0500] "GET /69R8Rs.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:12 -0500] "GET /zzxy.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:13 -0500] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:14 -0500] "GET /xnty.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:15 -0500] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:15 -0500] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:16 -0500] "GET /xv23.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:17 -0500] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:17 -0500] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:18 -0500] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:19 -0500] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:20 -0500] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:21 -0500] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:22 -0500] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:23 -0500] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:24 -0500] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:25 -0500] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:26 -0500] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:27 -0500] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:28 -0500] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:29 -0500] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:30 -0500] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:30 -0500] "GET //2.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:31 -0500] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:32 -0500] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:33 -0500] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:33 -0500] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:34 -0500] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:35 -0500] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:35 -0500] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:36 -0500] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:37 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:38 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:40 -0500] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:40 -0500] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:42 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:43 -0500] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:45 -0500] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:45 -0500] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:47 -0500] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:48 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:48 -0500] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:50 -0500] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:51 -0500] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:51 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:52 -0500] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:52 -0500] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:53 -0500] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:54 -0500] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:55 -0500] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:55 -0500] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:56 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:57 -0500] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:58 -0500] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:39:59 -0500] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:00 -0500] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:00 -0500] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:01 -0500] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:01 -0500] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:03 -0500] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:04 -0500] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:05 -0500] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:06 -0500] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:08 -0500] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:10 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:10 -0500] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:12 -0500] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:13 -0500] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:15 -0500] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:16 -0500] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:18 -0500] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:19 -0500] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:20 -0500] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:23 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:24 -0500] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:24 -0500] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:24 -0500] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:25 -0500] "GET /fleen.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:27 -0500] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:28 -0500] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:29 -0500] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:30 -0500] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:30 -0500] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:31 -0500] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:32 -0500] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:33 -0500] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:34 -0500] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:34 -0500] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:34 -0500] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:35 -0500] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:35 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:36 -0500] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:37 -0500] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:39 -0500] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:39 -0500] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:41 -0500] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:42 -0500] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:42 -0500] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:43 -0500] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:43 -0500] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:44 -0500] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:44 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:44 -0500] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:45 -0500] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:46 -0500] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:47 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:47 -0500] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:48 -0500] "GET /tymn.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:49 -0500] "GET //bak.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:50 -0500] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:51 -0500] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:51 -0500] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:52 -0500] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:53 -0500] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:54 -0500] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:54 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:55 -0500] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:56 -0500] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:56 -0500] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:57 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:58 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:59 -0500] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:40:59 -0500] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:00 -0500] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:00 -0500] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:01 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:02 -0500] "GET /core.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:02 -0500] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:03 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:03 -0500] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:04 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:04 -0500] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:05 -0500] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:06 -0500] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:08 -0500] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:09 -0500] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:09 -0500] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:10 -0500] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:11 -0500] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:11 -0500] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:12 -0500] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:13 -0500] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:13 -0500] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:14 -0500] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:16 -0500] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:16 -0500] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:17 -0500] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:18 -0500] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:19 -0500] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:19 -0500] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:20 -0500] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:21 -0500] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.111.57.125 - - [03/Mar/2026:08:41:22 -0500] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:14 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:18 -0500] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:19 -0500] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:19 -0500] "GET /f.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:20 -0500] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:21 -0500] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:22 -0500] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:22 -0500] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:23 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:24 -0500] "GET /add.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:25 -0500] "GET /path.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:25 -0500] "GET /my.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:26 -0500] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:27 -0500] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:29 -0500] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:29 -0500] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:30 -0500] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:33 -0500] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:33 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:34 -0500] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:35 -0500] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:36 -0500] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:37 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:38 -0500] "GET /wp-x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:38 -0500] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:40 -0500] "GET /wp-content/bnm.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:41 -0500] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:42 -0500] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:43 -0500] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:44 -0500] "GET /pepe.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:44 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:45 -0500] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:46 -0500] "GET /god.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:46 -0500] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:47 -0500] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:48 -0500] "GET /ad2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:48 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:49 -0500] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:50 -0500] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:51 -0500] "GET /aki.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:52 -0500] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:53 -0500] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:54 -0500] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:54 -0500] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:55 -0500] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:56 -0500] "GET /bs4.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:57 -0500] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:27:59 -0500] "GET /ftyude.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:00 -0500] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:01 -0500] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:02 -0500] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:03 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:05 -0500] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:05 -0500] "GET /wp-content/fot.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:07 -0500] "GET /sxdfrt.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:08 -0500] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:09 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:10 -0500] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:11 -0500] "GET /wp-admin/ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:12 -0500] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:12 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:14 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:14 -0500] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:15 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:17 -0500] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:18 -0500] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:18 -0500] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:19 -0500] "GET /wp-content/cc13.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:20 -0500] "GET /wp-admin/network/user-new.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:22 -0500] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:23 -0500] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:23 -0500] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:24 -0500] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:26 -0500] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:27 -0500] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:27 -0500] "GET /tkllu.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:28 -0500] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:29 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:30 -0500] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:30 -0500] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:31 -0500] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:32 -0500] "GET /xtsr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:32 -0500] "GET /Masks.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:33 -0500] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:34 -0500] "GET /jb33.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:34 -0500] "GET /vogme.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:35 -0500] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:35 -0500] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:36 -0500] "GET /global.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:37 -0500] "GET /As.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:38 -0500] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:39 -0500] "GET /advanc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:40 -0500] "GET /ahgag.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:41 -0500] "GET /yoawv.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:42 -0500] "GET /xogve.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:43 -0500] "GET /lp5.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:44 -0500] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:45 -0500] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:46 -0500] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:47 -0500] "GET /uxijj.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:48 -0500] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:49 -0500] "GET /resp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:50 -0500] "GET /ppxhp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:51 -0500] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:53 -0500] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:54 -0500] "GET /yclby.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:56 -0500] "GET /100.kb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:57 -0500] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:57 -0500] "GET /zwq13.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:58 -0500] "GET /wqqs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:28:59 -0500] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:00 -0500] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:00 -0500] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:01 -0500] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:02 -0500] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:03 -0500] "GET /wp-admin/maint/bal.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:04 -0500] "GET /xex.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:05 -0500] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:06 -0500] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:07 -0500] "GET /ticket.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:08 -0500] "GET /state.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:09 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:09 -0500] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:10 -0500] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:11 -0500] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:12 -0500] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:13 -0500] "GET /wp-4doption1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [03/Mar/2026:09:29:14 -0500] "GET /img.php HTTP/1.1" 301 795 "-" "-" 14.225.208.202 - - [03/Mar/2026:09:33:06 -0500] "HEAD / HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 124.198.131.121 - - [03/Mar/2026:09:33:07 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 3.149.1.97 - - [03/Mar/2026:09:33:10 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 18.116.74.228 - - [03/Mar/2026:09:33:10 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 3.12.35.152 - - [03/Mar/2026:09:33:10 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 194.26.192.196 - - [03/Mar/2026:09:40:27 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.196 - - [03/Mar/2026:09:40:27 -0500] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.196 - - [03/Mar/2026:09:40:27 -0500] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.196 - - [03/Mar/2026:09:40:27 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.196 - - [03/Mar/2026:09:40:27 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.196 - - [03/Mar/2026:09:40:32 -0500] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.73.225 - - [03/Mar/2026:09:51:54 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 157.15.40.90 - - [03/Mar/2026:10:11:48 -0500] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:11:55 -0500] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:11:57 -0500] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:11:58 -0500] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:12:00 -0500] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:12:02 -0500] "GET /postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:12:03 -0500] "GET /wp-content/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:12:05 -0500] "GET /wp-admin/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [03/Mar/2026:10:12:06 -0500] "GET /wp-includes/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 162.62.213.187 - - [03/Mar/2026:11:14:48 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.89.197.248 - - [03/Mar/2026:11:23:14 -0500] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:14 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:14 -0500] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:14 -0500] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:14 -0500] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:23 -0500] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:23 -0500] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:23 -0500] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:23 -0500] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:23:23 -0500] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:34 -0500] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:34 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:34 -0500] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:34 -0500] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:34 -0500] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:47 -0500] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:47 -0500] "GET /ae.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:47 -0500] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:47 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:24:47 -0500] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:25:53 -0500] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:52 -0500] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:52 -0500] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:52 -0500] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:52 -0500] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:52 -0500] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:53 -0500] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:53 -0500] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:53 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:53 -0500] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:26:53 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:01 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:01 -0500] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:01 -0500] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:01 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:01 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:55 -0500] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:55 -0500] "GET /enfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:55 -0500] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:55 -0500] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:55 -0500] "GET /down.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:59 -0500] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:59 -0500] "GET /heada.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:59 -0500] "GET /pinuseren.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:59 -0500] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:28:59 -0500] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:22 -0500] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:22 -0500] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:22 -0500] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:22 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:22 -0500] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:23 -0500] "GET /wp-content/uploads/mfw-activity-logger/csv-uploads/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:23 -0500] "GET /63ck0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:23 -0500] "GET /cytox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:23 -0500] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:30:23 -0500] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:14 -0500] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:14 -0500] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:14 -0500] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:14 -0500] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:14 -0500] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:22 -0500] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:22 -0500] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:22 -0500] "GET /anon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:22 -0500] "GET /ak74.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:22 -0500] "GET /cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /ets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /ninja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:25 -0500] "GET /wp-access.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:28 -0500] "GET /an0nmini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:28 -0500] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:28 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:28 -0500] "GET /0byt3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:28 -0500] "GET /nsts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:30 -0500] "GET /nn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:30 -0500] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:30 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:30 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:30 -0500] "GET /foxwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /00.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:32 -0500] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /wawe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /js.php?get HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /wp-email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /foxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:35 -0500] "GET /wp-booking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /fierza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:38 -0500] "GET /wp-content/themes/fitnessbase/crp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:41 -0500] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /lock360.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:44 -0500] "GET /01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /.well-known/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /ciis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /zfox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /0o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:46 -0500] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /zf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /xd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /adriv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:50 -0500] "GET /tonant.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /4mosan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:53 -0500] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-key.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /block-patwp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-conctent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:55 -0500] "GET /wp-content/flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /bre.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /ffAA531.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /wp-help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:31:58 -0500] "GET /991176.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /un.php?f=f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /ww.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /wp-posts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:01 -0500] "GET /un2.php?f=f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /unknown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /kyami.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /1975.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /testwp.php?wp=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:04 -0500] "GET /wp-includes/class-wp-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /god4m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:06 -0500] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /shl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:09 -0500] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /wp-content/themes/noriumportfolio/img_screen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /hi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:12 -0500] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/noriumportfolio/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/noriumportfolio/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/noriumportfolio/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:15 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-content/themes/skatepark/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-content/themes/skatepark/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-content/themes/skatepark/img_screen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-content/plugins/db/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:17 -0500] "GET /wp-content/themes/skatepark/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /wp-content/themes/wp-pridmag/22x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /wp-content/themes/workart/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /wp-content/plugins/ndak/marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:20 -0500] "GET /wp-content/plugins/ndak/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-content/plugins/cache-wordpress/wp-activates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-content/themes/workart/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-content/plugins/cekidot/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-content/plugins/cekidot/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:23 -0500] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /wp-content/themes/theme/gr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /wp-content/themes/cepair/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /wp-content/themes/jobart/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /wp-content/themes/pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:26 -0500] "GET /wp-content/themes/jobart/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-content/themes/cakiltheme/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-content/themes/cakiltheme/idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:29 -0500] "GET /wp-content/themes/wp-pridmag/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp-content/themes/rishi/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp-content/themes/rishi/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:31 -0500] "GET /wp-content/plugins/virr/v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-content/plugins/virr/uploader.php?uploader HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-content/plugins/wp-freeform/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-content/plugins/wp-freeform/wawe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-content/plugins/wp-freeform/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:34 -0500] "GET /wp-content/plugins/db/uploader.php?uploader HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /r00t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /?loadme HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /galekjaya.php?raimu=tgl99 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /radio.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:37 -0500] "GET /Xzd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:39 -0500] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /2index.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /local.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /1index.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /wikindex.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:42 -0500] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-admin/includes/1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-inlcudes.php?katib HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-backup-sql-302.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:44 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-js.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /wp-load.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:47 -0500] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /0x0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /0z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:50 -0500] "GET /1975.php?CVE=2022 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /1975.php?CVE=2021 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /45.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:52 -0500] "GET /4x4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /73.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:55 -0500] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /alfa-shell-v4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /alf4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /alfakun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:57 -0500] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:59 -0500] "GET /alfateslav4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:59 -0500] "GET /anons79.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:59 -0500] "GET /alfatesla.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:59 -0500] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:32:59 -0500] "GET /anjay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:02 -0500] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:02 -0500] "GET /batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:02 -0500] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:02 -0500] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:02 -0500] "GET /bj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:06 -0500] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:06 -0500] "GET /byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:06 -0500] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:06 -0500] "GET /bypas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:06 -0500] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:08 -0500] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:08 -0500] "GET /con.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:08 -0500] "GET /chitoge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:08 -0500] "GET /ccaef.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:08 -0500] "GET /codeboy1877x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:11 -0500] "GET /con7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:11 -0500] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:11 -0500] "GET /dbx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:11 -0500] "GET /con7ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:11 -0500] "GET /degeselih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:14 -0500] "GET /Dz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:14 -0500] "GET /dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:14 -0500] "GET /docindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:14 -0500] "GET /dosya.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:14 -0500] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:16 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:16 -0500] "GET /error.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:16 -0500] "GET /evil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:16 -0500] "GET /FoxWSO-full.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:16 -0500] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:19 -0500] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:19 -0500] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:19 -0500] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:19 -0500] "GET /gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:19 -0500] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:22 -0500] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:22 -0500] "GET /idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:22 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:22 -0500] "GET /ids.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:22 -0500] "GET /id.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:25 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:25 -0500] "GET /iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:25 -0500] "GET /ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:25 -0500] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:25 -0500] "GET /iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:27 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:27 -0500] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:27 -0500] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:27 -0500] "GET /kepo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:27 -0500] "GET /kndw1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:31 -0500] "GET /lnedx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:31 -0500] "GET /lolzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:31 -0500] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:31 -0500] "GET /mas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:31 -0500] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:34 -0500] "GET /minik.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:34 -0500] "GET /mclash.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:34 -0500] "GET /mi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:34 -0500] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:34 -0500] "GET /min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:37 -0500] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:37 -0500] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:37 -0500] "GET /minishell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:37 -0500] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:37 -0500] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:40 -0500] "GET /priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:40 -0500] "GET /postfs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:40 -0500] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:40 -0500] "GET /pref.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:40 -0500] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:44 -0500] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:44 -0500] "GET /rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:44 -0500] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:44 -0500] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:44 -0500] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:47 -0500] "GET /root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:47 -0500] "GET /sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:47 -0500] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:47 -0500] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:47 -0500] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:50 -0500] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:50 -0500] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:50 -0500] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:50 -0500] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:50 -0500] "GET /tes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:53 -0500] "GET /teslav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:53 -0500] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:53 -0500] "GET /tshop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:53 -0500] "GET /tesla.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:53 -0500] "GET /twin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:55 -0500] "GET /usb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:55 -0500] "GET /v3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:55 -0500] "GET /utchiha.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:55 -0500] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:55 -0500] "GET /usr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:58 -0500] "GET /v4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:58 -0500] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:58 -0500] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:58 -0500] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:33:58 -0500] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:01 -0500] "GET /wp-defaul.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:01 -0500] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:01 -0500] "GET /wp-mails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:01 -0500] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:01 -0500] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:05 -0500] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:05 -0500] "GET /wp-pluging.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:05 -0500] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:05 -0500] "GET /wp-singupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:05 -0500] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:10 -0500] "GET /wp-we.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:10 -0500] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:10 -0500] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:10 -0500] "GET /wp-system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:10 -0500] "GET /wp-title.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:13 -0500] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:13 -0500] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:13 -0500] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:13 -0500] "GET /wpindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:13 -0500] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:16 -0500] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:16 -0500] "GET /xcv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:16 -0500] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:16 -0500] "GET /xidcm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:16 -0500] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:19 -0500] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:19 -0500] "GET /y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:19 -0500] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:19 -0500] "GET /xm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:19 -0500] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:22 -0500] "GET /zx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:22 -0500] "GET /zone.php?phpshell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:22 -0500] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:22 -0500] "GET /z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:22 -0500] "GET /zk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:25 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:25 -0500] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:25 -0500] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:25 -0500] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:25 -0500] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:28 -0500] "GET /6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:28 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:28 -0500] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:28 -0500] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:28 -0500] "GET /9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:30 -0500] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:30 -0500] "GET /d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:30 -0500] "GET /g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:30 -0500] "GET /q.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:30 -0500] "GET /f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:33 -0500] "GET /h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:33 -0500] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:33 -0500] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:33 -0500] "GET /j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:33 -0500] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:36 -0500] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:36 -0500] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:36 -0500] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:36 -0500] "GET /777.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:36 -0500] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:39 -0500] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:39 -0500] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:39 -0500] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:39 -0500] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:39 -0500] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:41 -0500] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:41 -0500] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:41 -0500] "GET /if.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:41 -0500] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:41 -0500] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:44 -0500] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:44 -0500] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:44 -0500] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:44 -0500] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:44 -0500] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:46 -0500] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:46 -0500] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:46 -0500] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:46 -0500] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:46 -0500] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:49 -0500] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:49 -0500] "GET /500.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:49 -0500] "GET /sh3ll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:49 -0500] "GET /b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:49 -0500] "GET /406.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:52 -0500] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:52 -0500] "GET /Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:52 -0500] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:52 -0500] "GET /uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:52 -0500] "GET /IndoXploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:54 -0500] "GET /_.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:54 -0500] "GET /123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:54 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:54 -0500] "GET /wps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:54 -0500] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:57 -0500] "GET /raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:57 -0500] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:57 -0500] "GET /1877x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:57 -0500] "GET /wp-cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:34:57 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:00 -0500] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:00 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:00 -0500] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:00 -0500] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:00 -0500] "GET /green.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:03 -0500] "GET /wp-.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:03 -0500] "GET /radio.PHP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:03 -0500] "GET /radio.PHP56 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:03 -0500] "GET /xleet.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:03 -0500] "GET /wp-about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:07 -0500] "GET /ws0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:07 -0500] "GET /xt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:07 -0500] "GET /a1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:07 -0500] "GET /b374k.php5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:07 -0500] "GET /wp1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:12 -0500] "GET /fz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:12 -0500] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:12 -0500] "GET /exploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:12 -0500] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:12 -0500] "GET /axshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:15 -0500] "GET /mad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:15 -0500] "GET /fg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:15 -0500] "GET /r57.php5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:15 -0500] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:15 -0500] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:19 -0500] "GET /wso403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:19 -0500] "GET /sh3lls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:19 -0500] "GET /0day.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:19 -0500] "GET /m.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:19 -0500] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:22 -0500] "GET /compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:22 -0500] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:22 -0500] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:22 -0500] "GET /up.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:22 -0500] "GET /byp403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:25 -0500] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:25 -0500] "GET /fox.PHP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:25 -0500] "GET /Fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:25 -0500] "GET /6s6s6s6s6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:25 -0500] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:28 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:28 -0500] "GET /byp7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:28 -0500] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:28 -0500] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:28 -0500] "GET /anonsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:31 -0500] "GET /seo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:31 -0500] "GET /wp-includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:31 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:31 -0500] "GET /bypp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:31 -0500] "GET /administrator.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:33 -0500] "GET /tmp/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:33 -0500] "GET /tmp/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:33 -0500] "GET /tmp/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:33 -0500] "GET /tmp/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:33 -0500] "GET /tmp/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:37 -0500] "GET /tmp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:37 -0500] "GET /.tmb/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:37 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:37 -0500] "GET /.well-known/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:37 -0500] "GET /tmp/Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:39 -0500] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:39 -0500] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:39 -0500] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:39 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:39 -0500] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:42 -0500] "GET /wp-includes/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:42 -0500] "GET /wp-includes/class-IXR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:42 -0500] "GET /wp-includes/cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:42 -0500] "GET /wp-includes/l10n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:42 -0500] "GET /wp-includes/Text/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:44 -0500] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:44 -0500] "GET /wp-includes/f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:44 -0500] "GET /wp-includes/css/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:44 -0500] "GET /wp-includes/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:44 -0500] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:47 -0500] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:47 -0500] "GET /wp-includes/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:47 -0500] "GET /wp-includes/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:47 -0500] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:47 -0500] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:50 -0500] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:50 -0500] "GET /wp-includes/pomo/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:50 -0500] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:50 -0500] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:50 -0500] "GET /wp-includes/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:53 -0500] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:53 -0500] "GET /wp-includes/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:53 -0500] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:53 -0500] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:53 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:55 -0500] "GET /includes/wp-admin/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:55 -0500] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:55 -0500] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:55 -0500] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:55 -0500] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:58 -0500] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:58 -0500] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:58 -0500] "GET /wp-admin/plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:58 -0500] "GET /wp-admin/user/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:35:58 -0500] "GET /wp-admin/images/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:01 -0500] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:01 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:01 -0500] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:01 -0500] "GET /cgi-bin/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:01 -0500] "GET /wp-content/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:04 -0500] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:04 -0500] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:04 -0500] "GET /wp-content/duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:04 -0500] "GET /wp-admin/wp-apxupx.php?apx=upxs HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:04 -0500] "GET /wp-includes/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:07 -0500] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:07 -0500] "GET /wp-admin/f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:07 -0500] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:07 -0500] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:07 -0500] "GET /wp-admin/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:11 -0500] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:11 -0500] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:11 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:11 -0500] "GET /wp-admin/w3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:11 -0500] "GET /wp-admin/wp-diff.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:15 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:15 -0500] "GET /wp-admin/css/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:15 -0500] "GET /wp-admin/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:15 -0500] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:15 -0500] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:18 -0500] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:18 -0500] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:18 -0500] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:18 -0500] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:18 -0500] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:21 -0500] "GET /wp-admin/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:21 -0500] "GET /wp-admin/b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:21 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:21 -0500] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:21 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:24 -0500] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:24 -0500] "GET /wp-content/f0x.ph HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:24 -0500] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:24 -0500] "GET /wp-content/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:24 -0500] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:29 -0500] "GET /images/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:29 -0500] "GET /images/fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:29 -0500] "GET /images/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:29 -0500] "GET /wp-content/plugins/akismet/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:29 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:32 -0500] "GET /images/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:32 -0500] "GET /images/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:32 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/wpx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:32 -0500] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:32 -0500] "GET /images/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:36 -0500] "GET /wp-includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:36 -0500] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:36 -0500] "GET /images/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:36 -0500] "GET /wp-admin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:36 -0500] "GET /wp-content/uploads/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:39 -0500] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:39 -0500] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:39 -0500] "GET /wp-content/themes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:39 -0500] "GET /wp-content/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:39 -0500] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:42 -0500] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:42 -0500] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:42 -0500] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:42 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:42 -0500] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:45 -0500] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:45 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:45 -0500] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:45 -0500] "GET /eagle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:45 -0500] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:48 -0500] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:48 -0500] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:48 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:48 -0500] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:48 -0500] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:51 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:51 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:51 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:51 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:51 -0500] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:54 -0500] "GET /sad/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:54 -0500] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:54 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:54 -0500] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:54 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:58 -0500] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:58 -0500] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:58 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:58 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:36:58 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:00 -0500] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:00 -0500] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:00 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:00 -0500] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:00 -0500] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:02 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:02 -0500] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:02 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:02 -0500] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:02 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:04 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:04 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:04 -0500] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:04 -0500] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:04 -0500] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:07 -0500] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:07 -0500] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:07 -0500] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:07 -0500] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:07 -0500] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:11 -0500] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:11 -0500] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:11 -0500] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:11 -0500] "GET /.well-knownold/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:11 -0500] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:14 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:14 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:14 -0500] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 159.89.197.248 - - [03/Mar/2026:11:37:14 -0500] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 43.155.195.141 - - [03/Mar/2026:11:49:50 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 181.177.89.104 - - [03/Mar/2026:11:53:41 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 4.204.200.32 - - [03/Mar/2026:11:55:56 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:07 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:08 -0500] "GET //koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:09 -0500] "GET /bes.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:10 -0500] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:11 -0500] "GET /eauu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:12 -0500] "GET //wp-includes/js/tinymce/themes/inlite HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:13 -0500] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:14 -0500] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:16 -0500] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:17 -0500] "GET /nzv.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:18 -0500] "GET /sadd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:19 -0500] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:20 -0500] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:21 -0500] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:22 -0500] "GET /xmy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:23 -0500] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:24 -0500] "GET /rum.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:25 -0500] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:26 -0500] "GET /wpver.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:27 -0500] "GET /error1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:29 -0500] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:30 -0500] "GET /avim.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:31 -0500] "GET /jq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:32 -0500] "GET /guk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:33 -0500] "GET /gool.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:34 -0500] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:35 -0500] "GET /ws79.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:36 -0500] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:37 -0500] "GET /clasa99.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:38 -0500] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:39 -0500] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:40 -0500] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:42 -0500] "GET /ocxla.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:43 -0500] "GET //thui.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:44 -0500] "GET /brc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:45 -0500] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:46 -0500] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:47 -0500] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:48 -0500] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:49 -0500] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:50 -0500] "GET /ws62.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:51 -0500] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:52 -0500] "GET /scx.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:53 -0500] "GET /end.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:54 -0500] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:55 -0500] "GET /zwq13.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:56 -0500] "GET /ebahvhhh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:57 -0500] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:58 -0500] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:56:59 -0500] "GET /cxc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:00 -0500] "GET /snq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:00 -0500] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:01 -0500] "GET /05.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:02 -0500] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:03 -0500] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:04 -0500] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:05 -0500] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:06 -0500] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:07 -0500] "GET /public/hi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:08 -0500] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:09 -0500] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:10 -0500] "GET /loxi-o.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:11 -0500] "GET /G-in.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:12 -0500] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:13 -0500] "GET /god.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:14 -0500] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:15 -0500] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:16 -0500] "GET /post.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:17 -0500] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:18 -0500] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:19 -0500] "GET /rpk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:20 -0500] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:21 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:22 -0500] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:23 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:23 -0500] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:24 -0500] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:25 -0500] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:26 -0500] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:27 -0500] "GET /iko.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:28 -0500] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:29 -0500] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:30 -0500] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:31 -0500] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:32 -0500] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:33 -0500] "GET /wp-admin/sc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:34 -0500] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:34 -0500] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:35 -0500] "GET /olfclass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:36 -0500] "GET //ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:37 -0500] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:38 -0500] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:39 -0500] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:40 -0500] "GET /wqqs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:41 -0500] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:41 -0500] "GET /e.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:42 -0500] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:43 -0500] "GET /z.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:44 -0500] "GET /thui.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:46 -0500] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:47 -0500] "GET /gjm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:48 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:49 -0500] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:50 -0500] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:51 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:52 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:53 -0500] "GET /wp-freya.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:53 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:54 -0500] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:55 -0500] "GET /fasx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:56 -0500] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:57 -0500] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:58 -0500] "GET /tax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:57:59 -0500] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:00 -0500] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:01 -0500] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:02 -0500] "GET /sdsa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:03 -0500] "GET /wsws.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:04 -0500] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:05 -0500] "GET /fun.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:06 -0500] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:07 -0500] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:08 -0500] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:09 -0500] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:10 -0500] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:10 -0500] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:11 -0500] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:12 -0500] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:13 -0500] "GET /co.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:14 -0500] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:15 -0500] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:16 -0500] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:17 -0500] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:18 -0500] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:18 -0500] "GET /nhr.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:20 -0500] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:21 -0500] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:22 -0500] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:23 -0500] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:24 -0500] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:25 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:26 -0500] "GET /wio.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:27 -0500] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:28 -0500] "GET /wpo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:28 -0500] "GET /bsg-management/php.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:29 -0500] "GET /get.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:30 -0500] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:31 -0500] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:32 -0500] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:33 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:34 -0500] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:35 -0500] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:36 -0500] "GET /sxdfrt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:37 -0500] "GET /1061.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:38 -0500] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:39 -0500] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:40 -0500] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:41 -0500] "GET /100.kb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:42 -0500] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:43 -0500] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:44 -0500] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:45 -0500] "GET /fr/ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:46 -0500] "GET /un.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:47 -0500] "GET /zc-318.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:48 -0500] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:49 -0500] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:50 -0500] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [03/Mar/2026:11:58:50 -0500] "GET /dsd.php HTTP/1.1" 301 795 "-" "-" 125.136.46.100 - - [03/Mar/2026:12:10:33 -0500] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.144.148.122 - - [03/Mar/2026:13:12:15 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.123.109.58 - - [03/Mar/2026:13:28:28 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 158.94.208.230 - - [03/Mar/2026:13:54:17 -0500] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:18 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:18 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:18 -0500] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:18 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:18 -0500] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.166 - - [03/Mar/2026:14:38:21 -0500] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
Copyright ©2021 || Defacer Indonesia