213.209.157.253 - - [21/Oct/2025:10:35:48 +0700] "GET /.git/config HTTP/1.1" 403 1556 "-" "Mozilla/5.0 (Linux; U; Android 2.0; en-us; Milestone Build/ SHOLS_U2_01.03.1) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17"
196.251.71.69 - - [21/Oct/2025:17:23:24 +0700] "GET /wp-login.php HTTP/1.1" 301 1062 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
209.38.166.87 - - [21/Oct/2025:19:27:15 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1098 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:16 +0700] "GET /wp-2019.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:18 +0700] "GET /atomlib.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:19 +0700] "GET /css.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:19 +0700] "GET /log.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:20 +0700] "GET /index.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:20 +0700] "GET /mail.php HTTP/1.1" 301 1058 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:21 +0700] "GET /lufix.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:22 +0700] "GET /doc.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:23 +0700] "GET /bak.php HTTP/1.1" 301 1020 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:25 +0700] "GET /content.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:26 +0700] "GET /upfile.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:27 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:27 +0700] "GET /bypass.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:27 +0700] "GET /wp-activate.php HTTP/1.1" 301 1065 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:28 +0700] "GET /updates.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:28 +0700] "GET /plugins.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:29 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:29 +0700] "GET /ae.php HTTP/1.1" 301 1056 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:30 +0700] "GET /moon.php HTTP/1.1" 301 1021 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:31 +0700] "GET /blog.php HTTP/1.1" 301 1058 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:33 +0700] "GET /themes.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:33 +0700] "GET /ini.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:34 +0700] "GET /as.php HTTP/1.1" 301 1056 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:34 +0700] "GET /shell.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:35 +0700] "GET /ws.php HTTP/1.1" 301 1056 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:35 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:36 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:36 +0700] "GET /wp-atom.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:36 +0700] "GET /fw.php HTTP/1.1" 301 1019 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:37 +0700] "GET /install.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:39 +0700] "GET /wp-login.php HTTP/1.1" 301 1062 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:39 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1080 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:40 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:41 +0700] "GET /radio.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:43 +0700] "GET /chosen.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:43 +0700] "GET /simple.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:44 +0700] "GET /class.api.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:46 +0700] "GET /wp-head.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:46 +0700] "GET /file.php HTTP/1.1" 301 1021 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:48 +0700] "GET /assets/css/403.php HTTP/1.1" 301 1068 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:49 +0700] "GET /403.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:49 +0700] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 1085 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:50 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:50 +0700] "GET /mah.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:51 +0700] "GET /cong.php HTTP/1.1" 301 1058 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:51 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 1105 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:52 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1081 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:52 +0700] "GET /wp-mail.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:53 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1053 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:56 +0700] "GET /wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 1101 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:57 +0700] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:58 +0700] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 1090 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:27:58 +0700] "GET /.tmb/class_api.php HTTP/1.1" 301 1068 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:00 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 1067 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:01 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:01 +0700] "GET /repeater.php HTTP/1.1" 301 1062 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:02 +0700] "GET /wp-admin/dropdown.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:03 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:03 +0700] "GET /dropdown.php HTTP/1.1" 301 1025 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:05 +0700] "GET /about.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:08 +0700] "GET /admin.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:09 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:09 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1075 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:10 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1079 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:10 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:11 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:11 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1089 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:12 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1085 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:13 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1051 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:14 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 1087 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:15 +0700] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 1090 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:16 +0700] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 1090 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:16 +0700] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 1080 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:17 +0700] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:17 +0700] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 1077 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:18 +0700] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 1079 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:19 +0700] "GET /ccx/index.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:19 +0700] "GET /wp-content/ccx/index.php HTTP/1.1" 301 1074 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:20 +0700] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 1035 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:22 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1070 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:26 +0700] "GET /wp-info.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:27 +0700] "GET /wp-blog.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:27 +0700] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 1110 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:28 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:28 +0700] "GET /cjfuns.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:29 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1070 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:29 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1078 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:31 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:31 +0700] "GET /wp.php HTTP/1.1" 301 1056 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:31 +0700] "GET /404.php HTTP/1.1" 301 1020 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:34 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:34 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1088 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:35 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1093 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:35 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:36 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:36 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1073 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:37 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1111 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:37 +0700] "GET /users.php HTTP/1.1" 301 1059 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:38 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:38 +0700] "GET /yanz.php HTTP/1.1" 301 1021 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:41 +0700] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:42 +0700] "GET /alfanew.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:42 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:43 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1062 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:43 +0700] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 1085 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:44 +0700] "GET /images/cloud.php HTTP/1.1" 301 1066 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:45 +0700] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 1076 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:45 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:46 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1075 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:46 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1035 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:50 +0700] "GET /wp-content/gallery/about.php HTTP/1.1" 301 1078 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:50 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1080 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:51 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1081 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:51 +0700] "GET /wp-content/banners/about.php HTTP/1.1" 301 1078 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:51 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1070 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:52 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:52 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1076 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:54 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1075 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:54 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 1079 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:55 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1038 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:57 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:57 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:57 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1076 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:58 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:28:58 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1077 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:00 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1077 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:00 +0700] "GET /images/about.php HTTP/1.1" 301 1066 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:01 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 1078 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:01 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1071 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:02 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1028 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:03 +0700] "GET /wp-pano.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:03 +0700] "GET /defaul1.php HTTP/1.1" 301 1061 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:04 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1068 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:04 +0700] "GET /themes.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:05 +0700] "GET /xl2023.php HTTP/1.1" 301 1060 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:05 +0700] "GET /fm1.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:06 +0700] "GET /wso112233.php HTTP/1.1" 301 1063 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:06 +0700] "GET /shell20211028.php HTTP/1.1" 301 1067 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:07 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 1075 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:07 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 1041 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:08 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:09 +0700] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 1088 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:09 +0700] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php HTTP/1.1" 301 1133 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:10 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1068 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:10 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1079 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:11 +0700] "GET / HTTP/1.1" 301 1050 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:15 +0700] "GET /wp-admin/includes/class-wp-privacy-policy-content-https.php HTTP/1.1" 301 1109 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:16 +0700] "GET /wp-includes/images/smilies/techl.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:17 +0700] "GET /wp-includes/BDKR28_asq3dm1u.php HTTP/1.1" 301 1081 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:18 +0700] "GET /wp-includes/widgets/ff2.php HTTP/1.1" 301 1040 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:20 +0700] "GET /wp-admin/maint/ff2.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:21 +0700] "GET /admin-filters-part.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:21 +0700] "GET /mark.php HTTP/1.1" 301 1058 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:22 +0700] "GET /henla-68-APT-66x66.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:22 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1075 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:22 +0700] "GET /wp-includes/images/crystal/filed.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:23 +0700] "GET /.well-known/1mages.php HTTP/1.1" 301 1072 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:24 +0700] "GET /.well-known/akp.php HTTP/1.1" 301 1069 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:24 +0700] "GET /wp-admin/user/langsung-pointer.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:25 +0700] "GET /wp-admin/css/colors/blue/az.php HTTP/1.1" 301 1044 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:28 +0700] "GET /alfaajapet.php HTTP/1.1" 301 1064 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:29 +0700] "GET /rk2.php HTTP/1.1" 301 1057 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:29 +0700] "GET /BDKR28_shell.php HTTP/1.1" 301 1066 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:30 +0700] "GET /class-wp-ms-themes-list-table-other.php HTTP/1.1" 301 1089 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:30 +0700] "GET /wp-admin/css/colors/ectoplasm/12.php HTTP/1.1" 301 1086 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:31 +0700] "GET /wp-includes/images/media/newfl.php HTTP/1.1" 301 1084 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:31 +0700] "GET /BDKR28_pnbi8jhp.php HTTP/1.1" 301 1069 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:32 +0700] "GET /gecko-litespeed.php HTTP/1.1" 301 1069 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:32 +0700] "GET /BDKR28_jblnamqu.php HTTP/1.1" 301 1069 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:33 +0700] "GET /hexx.php HTTP/1.1" 301 1021 "-" "-"
209.38.166.87 - - [21/Oct/2025:19:29:34 +0700] "GET /%40.php HTTP/1.1" 301 1055 "-" "-"
203.217.101.237 - - [21/Oct/2025:20:34:04 +0700] "GET / HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36"
185.218.108.234 - - [21/Oct/2025:22:20:23 +0700] "GET /adminer.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"