HEX
Server: LiteSpeed
System: Linux 110.webhostingindonesia.co.id 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User: uvlnfyba (10197)
PHP: 7.4.33
Disabled: opcache_get_status,exec,passthru,shell_exec,system,popen,mail,proc_open,show_source,
Upload Files
File: /home/jkwebsite.my.id/logs/access_log.processed
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /dejavu.php HTTP/1.1" 301 1057 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /file7.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /bless.php HTTP/1.1" 301 1019 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /law.php HTTP/1.1" 301 1054 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /file3.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /file4.php HTTP/1.1" 301 1019 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:18 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:19 +0700] "GET /file6.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:19 +0700] "GET /file8.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:19 +0700] "GET /file9.php HTTP/1.1" 301 1056 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:19 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.230.10.177 - - [31/Aug/2025:03:03:19 +0700] "GET /faq.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:40 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:41 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:41 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:42 +0700] "GET /sty.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:42 +0700] "GET /JPG.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:43 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:43 +0700] "GET /wp-xml.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:44 +0700] "GET /pn.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:44 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:45 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:46 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:46 +0700] "GET /wp/sih.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:47 +0700] "GET /class-wp-header.php HTTP/1.1" 301 1066 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:47 +0700] "GET /dox.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:48 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:48 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:49 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:49 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:50 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 1075 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:50 +0700] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 301 1039 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:51 +0700] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 1093 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:52 +0700] "GET /images/Marvins.php HTTP/1.1" 301 1065 "-" "-"
172.190.142.176 - - [31/Aug/2025:06:47:52 +0700] "GET /wp-admin/doc.php HTTP/1.1" 301 1063 "-" "-"
143.198.48.159 - - [31/Aug/2025:10:42:05 +0700] "GET /spekta/assets/pendaftaran/back/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:05 +0700] "GET /assets/prod/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:05 +0700] "GET /public/javascript/jquery.upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:06 +0700] "GET /perpustakaan/form/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:06 +0700] "GET /assets/dev/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:06 +0700] "GET /assets/plugins/Uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:06 +0700] "GET /vendor/blueimp/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:07 +0700] "GET /assets/themes/metronic/global/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:07 +0700] "GET /admin/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:07 +0700] "GET /Admin/server/php/?file=memeklo.hitam HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:07 +0700] "GET /lib/vendor/symfony/lib/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /asset/admin/blueimp/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /admin/uploads/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /backend/assets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:08 +0700] "GET /app-assets/dev/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:09 +0700] "GET /components/com_tracs_forms/helpers/jQuery_File_Upload_9.5.7/server/php/?file=memeklo.hitam HTTP/1.1" 301 1137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:09 +0700] "GET /admin/assets/plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:09 +0700] "GET /cdn/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:09 +0700] "GET /public/app-assets/data/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:10 +0700] "GET /admin/assets/global/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:10 +0700] "GET /old/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:10 +0700] "GET /dev/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:10 +0700] "GET /backend/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:10 +0700] "GET /admin/include/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:11 +0700] "GET /login/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:11 +0700] "GET /Jquery_File_Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:11 +0700] "GET /handyman/tmp/upload/?file=memeklo.hitam HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:11 +0700] "GET /formcraft/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:12 +0700] "GET /Assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:12 +0700] "GET /data/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:13 +0700] "GET /wp-content/plugins/work-the-flow-file-upload/public/assets/jQuery-File-Upload-9.5.0/server/php/?file=memeklo.hitam HTTP/1.1" 301 1161 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:13 +0700] "GET /admin/plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:13 +0700] "GET /uploads/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:14 +0700] "GET /lib/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:14 +0700] "GET /admin/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:14 +0700] "GET /admin/asset/global/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:14 +0700] "GET /admin/plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:14 +0700] "GET /common/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:15 +0700] "GET /assets/old/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:15 +0700] "GET /assets/libs/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:15 +0700] "GET /app-plugins/data/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:15 +0700] "GET /assets_old2/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:15 +0700] "GET /assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:16 +0700] "GET /assets/data/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:16 +0700] "GET /assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:16 +0700] "GET /gallery/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:16 +0700] "GET /assets/plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:16 +0700] "GET /asset/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:17 +0700] "GET /lib/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:17 +0700] "GET /backup/assets-new/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:17 +0700] "GET /public/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:17 +0700] "GET /backup/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /assets/include/php/file-upload/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /assets/include/php/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:18 +0700] "GET /backend/assets/flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:19 +0700] "GET /coaster/jquery/gallery-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:19 +0700] "GET /assets-admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:19 +0700] "GET /2024/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:19 +0700] "GET /assets/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:20 +0700] "GET /assets/dev/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:20 +0700] "GET /assets/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:20 +0700] "GET /admin/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:20 +0700] "GET /admin/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:20 +0700] "GET /dev/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:21 +0700] "GET /gl/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:21 +0700] "GET /admin/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:21 +0700] "GET /jqueryupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:21 +0700] "GET /admin/assets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:21 +0700] "GET /assets_ckeditor/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1141 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:22 +0700] "GET /assets/js/vendor/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:22 +0700] "GET /web/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:22 +0700] "GET /plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:22 +0700] "GET /id/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:22 +0700] "GET /assets/backend/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:23 +0700] "GET /plugins-media/server/php/?file=memeklo.hitam HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:23 +0700] "GET /asset/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:23 +0700] "GET /assets/comp/RichFilemanager23/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:23 +0700] "GET /plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /assets/js/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /res/js/os/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /admin/asset/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /super/assets/comp/richfilemanager/scripts/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:24 +0700] "GET /spekta/assets/login/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:25 +0700] "GET /uploadmen/server/php/?file=memeklo.hitam HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:25 +0700] "GET /plugin/richfilemanager/scripts/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:25 +0700] "GET /backend/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:25 +0700] "GET /plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:26 +0700] "GET /assets/upload/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:26 +0700] "GET /admin/plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:26 +0700] "GET /assets/plugins/multiuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:26 +0700] "GET /spekta/assets/pendaftaran/back/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:26 +0700] "GET /resources/global/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1121 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:27 +0700] "GET /login/assets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:27 +0700] "GET /Assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:27 +0700] "GET /asset/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:27 +0700] "GET /flatlab/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /admin/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /dev/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /theme/assets/global/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /backend/assets/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /admin/asset/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:28 +0700] "GET /admin/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:29 +0700] "GET /coloradmin/assets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:29 +0700] "GET /wp-content/plugins/wp-symposium/server/php/?file=memeklo.hitam HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:29 +0700] "GET /administrator/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:29 +0700] "GET /3rdparty/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /admin/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /resources/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1121 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /adminLite/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /assets/vendor_admin/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /js/plugins/jquery-file-upload/server/phpassets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1172 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:30 +0700] "GET /beef/bonfire/themes/beef_admin/js/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:31 +0700] "GET /backup2/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:31 +0700] "GET /acms/ssets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:32 +0700] "GET /lib/vendor/symfony/lib/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:32 +0700] "GET /_admin/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:32 +0700] "GET /assets/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:32 +0700] "GET /backend/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:32 +0700] "GET /asset/admin/blueimp/server/?file=memeklo.hitam HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:33 +0700] "GET /backend/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:33 +0700] "GET /media/mediamgr/other/jq_fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:33 +0700] "GET /wp-content/plugins/fluid_forms/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:33 +0700] "GET /multiuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:33 +0700] "GET /asets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:34 +0700] "GET /global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:34 +0700] "GET /admin/asset/plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:34 +0700] "GET /app/webroot/global/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /admin/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /app-assets/dev/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /data/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /login/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /web/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:35 +0700] "GET /assets/js/vendor/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:36 +0700] "GET /old/server/php/?file=memeklo.hitam HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:36 +0700] "GET /asset/server/php/?file=memeklo.hitam HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:36 +0700] "GET /assets/js/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:36 +0700] "GET /cbt/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:37 +0700] "GET /asets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:37 +0700] "GET /jQuery-File-Upload-9.22.0/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:37 +0700] "GET /aset/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:37 +0700] "GET /admin/pages/Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:37 +0700] "GET /backup2/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:38 +0700] "GET /common/assets/jquery-god/server/php/?file=memeklo.hitam HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:38 +0700] "GET /media-admin/server/php/?file=memeklo.hitam HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:38 +0700] "GET /aset/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:38 +0700] "GET /assets/dev/plugins/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /assets/filemanager/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /panel/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /administrator/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /admin/assets/plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:39 +0700] "GET /public/multiuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:40 +0700] "GET /common/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:40 +0700] "GET /login/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:40 +0700] "GET /assets/themes/metronic/global/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:40 +0700] "GET /assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:41 +0700] "GET /assets/dev/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:41 +0700] "GET /assets/flatlab/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:41 +0700] "GET /super/assets/comp/richfilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:41 +0700] "GET /admin/asset/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:41 +0700] "GET /app-assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:42 +0700] "GET /js/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:42 +0700] "GET /app-assets/file/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:42 +0700] "GET /vendor/blueimp/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:43 +0700] "GET /assets/global/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:43 +0700] "GET /files/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:43 +0700] "GET /admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /public/asset_admin/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /backend/assets/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /media-login/server/php/?file=memeklo.hitam HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /media-administrator/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /files/assets/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:44 +0700] "GET /administrator/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:45 +0700] "GET /stpd_pbb/panel/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /components/com_sexycontactform/fileupload/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /admin/asset/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /assets/comp/richfilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:46 +0700] "GET /app-assets/files/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:47 +0700] "GET /spekta/assets/pendaftaran/back/plugins/fileupload/php/?file=memeklo.hitam HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:47 +0700] "GET /app/webroot/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:47 +0700] "GET /common/assets/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:47 +0700] "GET /assets/libs/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:48 +0700] "GET /assets/vendors/jquery.fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:48 +0700] "GET /public/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:48 +0700] "GET /media-plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:48 +0700] "GET /public/vendor/blueimp/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:48 +0700] "GET /v8/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:49 +0700] "GET /backend/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:49 +0700] "GET /app/vendor/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:49 +0700] "GET /backend/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:49 +0700] "GET /v1/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:49 +0700] "GET /plugin/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:50 +0700] "GET /admin/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:50 +0700] "GET /asset/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:50 +0700] "GET /assets/plugins/jquery.fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:50 +0700] "GET /app-assets/plugin/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:50 +0700] "GET /v2/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:51 +0700] "GET /id/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:51 +0700] "GET /old/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:51 +0700] "GET /app-assets/dev/plugins/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:51 +0700] "GET /login/assets/flatlab/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:51 +0700] "GET /public/admin/tools/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:52 +0700] "GET /backend/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:52 +0700] "GET /assets/comp/RichFilemanager-2.7.0/libs/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:52 +0700] "GET /common/assets/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:52 +0700] "GET /metronic/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /admin/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /css/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /wp-content/themes/multimedia1/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /plugins/system/sunfw/assets/3rd-party/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /assets/be/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:53 +0700] "GET /js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:54 +0700] "GET /assets/vendor/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:54 +0700] "GET /backend/assets/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:54 +0700] "GET /foto/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:54 +0700] "GET /plugins/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:55 +0700] "GET /login/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:55 +0700] "GET /plugins/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:55 +0700] "GET /2025/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:55 +0700] "GET /_admin/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
84.247.170.208 - - [31/Aug/2025:10:42:55 +0700] "GET /bk HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:55 +0700] "GET /old/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1136 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:56 +0700] "GET /app-assets/data/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:56 +0700] "GET /assets/color_admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:56 +0700] "GET /assets/js/vendor/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:56 +0700] "GET /app-assets/backend/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /theme/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /admin/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /2023/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:57 +0700] "GET /vehiculo_photos/server/php/?file=memeklo.hitam HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:58 +0700] "GET /vinlibrary/jquery.fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:58 +0700] "GET /assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:58 +0700] "GET /admin/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:58 +0700] "GET /files/assets/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:59 +0700] "GET /backup/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:59 +0700] "GET /public/plugins/multiuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:59 +0700] "GET /old/assets-new/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:59 +0700] "GET /asset/global/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:42:59 +0700] "GET /assets/comp/richfilemanager/scripts/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:00 +0700] "GET /login/server/php/?file=memeklo.hitam HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:00 +0700] "GET /login/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:00 +0700] "GET /old/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:00 +0700] "GET /public/uploadmen/server/php/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:00 +0700] "GET /assets/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:01 +0700] "GET /assets/prod/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:01 +0700] "GET /assets/global/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:01 +0700] "GET /lib/vendor/symfony/lib/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1121 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:01 +0700] "GET /js/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:01 +0700] "GET /jquery.fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:02 +0700] "GET /assets/global/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:02 +0700] "GET /login/assets/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:02 +0700] "GET /backup/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:02 +0700] "GET /plugin/richfilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /asset/plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /images/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /admin/server/php/?file=memeklo.hitam HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:03 +0700] "GET /plugins/work-the-flow-file-upload/public/assets/jQuery-File-Upload-9.5.0/server/php/?file=memeklo.hitam HTTP/1.1" 301 1150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:04 +0700] "GET /2025/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:04 +0700] "GET /assets/js/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:04 +0700] "GET /lib/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:04 +0700] "GET /assets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:05 +0700] "GET /asset_new/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:05 +0700] "GET /assets/prod/plugins/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:05 +0700] "GET /assets/admin/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:05 +0700] "GET /public/asset/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:05 +0700] "GET /admin/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:06 +0700] "GET /admin/asset/plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:06 +0700] "GET /lib/vendor/symfony/lib/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:06 +0700] "GET /login/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:06 +0700] "GET /assets/vendor/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:07 +0700] "GET /app-assets/admin/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:07 +0700] "GET /assets-new/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1136 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:07 +0700] "GET /login/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:07 +0700] "GET /assets_old/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1136 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:07 +0700] "GET /web/assets/flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:08 +0700] "GET /assets/vendor/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:08 +0700] "GET /backend/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:08 +0700] "GET /v2/assets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:08 +0700] "GET /form/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /assets/plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /assets/color_admin/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /admin/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /assets/js/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /vendor/jquery.filer/uploads/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:09 +0700] "GET /assets/template/assets/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:10 +0700] "GET /public/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:10 +0700] "GET /backend/assets/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:10 +0700] "GET /assets/manager/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:10 +0700] "GET /spekta/assets/pendaftaran/back/plugins/file-uploader/php/?file=memeklo.hitam HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:11 +0700] "GET /app-assets/old/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:11 +0700] "GET /common/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:11 +0700] "GET /admin/tools/assets/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:12 +0700] "GET /2023/assets/color-admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:12 +0700] "GET /dev/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:12 +0700] "GET /public/assets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:12 +0700] "GET /admin/asset/server/php/?file=memeklo.hitam HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:13 +0700] "GET /assets/js/vendor/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:15 +0700] "GET /assets/backend/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:15 +0700] "GET /pricelist/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:15 +0700] "GET /assets/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:15 +0700] "GET /admin/assets/flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /public/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /asset/plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /admin/assets/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:16 +0700] "GET /backend/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:17 +0700] "GET /common/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:17 +0700] "GET /metronic/assets/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:17 +0700] "GET /wp-content/plugins/formcraft/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:17 +0700] "GET /login/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:18 +0700] "GET /app-assets/dev/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:18 +0700] "GET /files/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:18 +0700] "GET /dtd/admin/pages/Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:18 +0700] "GET /app-plugin/data/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:18 +0700] "GET /coloradmin/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:19 +0700] "GET /metronic/assets/global/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:19 +0700] "GET /admin/assets/plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:20 +0700] "GET /file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:20 +0700] "GET /admin/plugin/server/php/?file=memeklo.hitam HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /assets/plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /assets/upload/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /backend/assets/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /pages/Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /public/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:21 +0700] "GET /spekta/assets/login/back/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:22 +0700] "GET /login/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:22 +0700] "GET /assets/vendor/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:22 +0700] "GET /assets/lib/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:22 +0700] "GET /assets/vendor_admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:23 +0700] "GET /pages/app-assets/data/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:23 +0700] "GET /app-assets/dev/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:23 +0700] "GET /assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:23 +0700] "GET /wp-content/themes/ebs/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:24 +0700] "GET /spekta/assets/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:24 +0700] "GET /assets/template/assets/fileupload/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:24 +0700] "GET /wp-content/plugins/art-picture-shop/admin/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1131 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:25 +0700] "GET /assets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:25 +0700] "GET /assets/lib/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:25 +0700] "GET /admin/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:26 +0700] "GET /2024/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:26 +0700] "GET /jeffs_simple_cms/media_uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:26 +0700] "GET /plugins/assets/jquery-god/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:26 +0700] "GET /asset/global/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:26 +0700] "GET /public/assets/global/plugins/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:27 +0700] "GET /app-assets/login/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:27 +0700] "GET /assets/global/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:27 +0700] "GET /vendor/blueimp/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:27 +0700] "GET /home/upload/upload_handler/?file=memeklo.hitam HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:28 +0700] "GET /public/asset/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:28 +0700] "GET /dev/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:28 +0700] "GET /plugin/fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:28 +0700] "GET /assets/prod/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /assets/js/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /plugins/js/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /plugins/assets/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /Administrator/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /app-assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:29 +0700] "GET /administrator/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:30 +0700] "GET /lib/vendor/symfony/lib/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:30 +0700] "GET /admin/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:30 +0700] "GET /botsolid/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:30 +0700] "GET /assets/login/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:31 +0700] "GET /plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:31 +0700] "GET /admin/asset/plugins/js/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:31 +0700] "GET /assets_new/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:31 +0700] "GET /admin/ckeditor/plugins/imageuploader/imgbrowser.php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:31 +0700] "GET /public/jquery.fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:32 +0700] "GET /js/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
84.247.170.208 - - [31/Aug/2025:10:43:32 +0700] "GET /home HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:32 +0700] "GET /assets/administrator/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:32 +0700] "GET /admin/assets/server/php/?file=memeklo.hitam HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:32 +0700] "GET /Login/server/php/?file=memeklo.hitam HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:32 +0700] "GET /backend/assets/comp/RichFilemanager/scripts/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:33 +0700] "GET /assetsa/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:33 +0700] "GET /assets/cms/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:33 +0700] "GET /upload/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:33 +0700] "GET /lib/global/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:33 +0700] "GET /assets/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:34 +0700] "GET /ospk/resources/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:34 +0700] "GET /assets/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:34 +0700] "GET /assets/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:34 +0700] "GET /file/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /backend/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /id/server/php/?file=memeklo.hitam HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /asset/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /assets/admin/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /admin/assets/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:35 +0700] "GET /dev/plugins/file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:36 +0700] "GET /app-assets/data/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:36 +0700] "GET /login/files/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:36 +0700] "GET /plugins/assets/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:37 +0700] "GET /tmp/upload/?file=memeklo.hitam HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:37 +0700] "GET /asset/plugins/js/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:37 +0700] "GET /public/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:37 +0700] "GET /files/assets/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:38 +0700] "GET /data/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:38 +0700] "GET /labs/jQuery-File-Upload-9.22.0/server/php/?file=memeklo.hitam HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:38 +0700] "GET /assets/dev/plugins/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:38 +0700] "GET /assets/dashboard/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /home/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /backup/assets/comp/RichFilemanager-2.7.0/libs/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /login/assets/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /backend/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /backup/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:39 +0700] "GET /assets/prod/plugins/fileuploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:40 +0700] "GET /admin/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:40 +0700] "GET /uploads/server/php/?file=memeklo.hitam HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:40 +0700] "GET /assets/flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:40 +0700] "GET /admin/assets/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:41 +0700] "GET /public/assets/backend/plugins/jquery-file-upload/server/?file=memeklo.hitam HTTP/1.1" 301 1122 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:41 +0700] "GET /admin/asset/global/plugins/server/php/?file=memeklo.hitam HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:41 +0700] "GET /login/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:41 +0700] "GET /public/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:41 +0700] "GET /flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:42 +0700] "GET /themes/metronic/assets/apps/php/?file=memeklo.hitam HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:42 +0700] "GET /server/php/?file=memeklo.hitam HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:42 +0700] "GET /assets/plugins/upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:42 +0700] "GET /spekta/assets/back/plugins/jQuery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:43 +0700] "GET /login/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:43 +0700] "GET /public/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:43 +0700] "GET /administrator/assets/plugins/uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:43 +0700] "GET /assets/panel/plugins/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /plugin/server/php/?file=memeklo.hitam HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /bphtb/public/uploadmen/server/php/?file=memeklo.hitam HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /admin/tools/assets/jquery-file-upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /admin/php/?file=memeklo.hitam HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /jquery_file_upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:44 +0700] "GET /fileupload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:45 +0700] "GET /login/assets/flatlab/assets/file-uploader/server/php/?file=memeklo.hitam HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:45 +0700] "GET /admin/assets/global/plugins/Jquery-File-Upload/server/php/?file=memeklo.hitam HTTP/1.1" 301 1124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
143.198.48.159 - - [31/Aug/2025:10:43:45 +0700] "GET /themes/metronic/assets/apps/php/server/php/?file=memeklo.hitam HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36"
84.247.170.208 - - [31/Aug/2025:10:44:05 +0700] "GET /wp HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
84.247.170.208 - - [31/Aug/2025:10:44:37 +0700] "GET /cms HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
198.235.24.179 - - [31/Aug/2025:11:25:56 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
54.149.130.151 - - [31/Aug/2025:12:06:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"
110.172.98.2 - - [31/Aug/2025:14:43:00 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.186.31.45 - - [31/Aug/2025:14:49:37 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
52.178.144.89 - - [31/Aug/2025:16:06:04 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:04 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:05 +0700] "GET /xex.php HTTP/1.1" 301 1054 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:06 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:06 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:06 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:07 +0700] "GET /rtheq.php HTTP/1.1" 301 1056 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:07 +0700] "GET /gloomed.php HTTP/1.1" 301 1058 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:08 +0700] "GET /x35.php HTTP/1.1" 301 1054 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:08 +0700] "GET /e.php HTTP/1.1" 301 1015 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:08 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:09 +0700] "GET /dedi1.php HTTP/1.1" 301 1056 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:09 +0700] "GET /zc-639.php HTTP/1.1" 301 1057 "-" "-"
52.178.144.89 - - [31/Aug/2025:16:06:10 +0700] "GET /wp-mn.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:45 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1026 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /moon.php= HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /star.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:46 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /goto.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /a3.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /ay.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /00.php HTTP/1.1" 301 1016 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /ty.php?p= HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:49 +0700] "GET /inputs.php?p= HTTP/1.1" 301 1023 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /click.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /wp-admin/maint/about.php?p= HTTP/1.1" 301 1074 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /x.php HTTP/1.1" 301 1015 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /g3.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /gel4y.php? HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /db.php HTTP/1.1" 301 1016 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:50 +0700] "GET /let.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /af32.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /new2.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /hob.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /ase.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /okk.php HTTP/1.1" 301 1017 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /ola.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /yee.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /msg.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /eru.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /2eaa2.php HTTP/1.1" 301 1056 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /ave.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /pow.php HTTP/1.1" 301 1017 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:51 +0700] "GET /dds.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /acme.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 1063 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /class-db.php HTTP/1.1" 301 1059 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /bak.php?p= HTTP/1.1" 301 1057 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /style2.php HTTP/1.1" 301 1020 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /end.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /uplozyu.php HTTP/1.1" 301 1058 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /icon.php HTTP/1.1" 301 1055 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /searchl.php HTTP/1.1" 301 1058 "-" "-"
52.230.31.173 - - [31/Aug/2025:16:56:52 +0700] "GET /504.php HTTP/1.1" 301 1054 "-" "-"
195.242.212.190 - - [31/Aug/2025:17:26:35 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:36 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:36 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:36 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:36 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
195.242.212.190 - - [31/Aug/2025:17:26:37 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:37 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:37 +0700] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:37 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:38 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:38 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:39 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
195.242.212.190 - - [31/Aug/2025:17:26:39 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
195.242.212.190 - - [31/Aug/2025:17:26:39 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:39 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
195.242.212.190 - - [31/Aug/2025:17:26:40 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:40 +0700] "GET /item.php/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
195.242.212.190 - - [31/Aug/2025:17:26:40 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:40 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:41 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:41 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:41 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:42 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:42 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:42 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:43 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
195.242.212.190 - - [31/Aug/2025:17:26:43 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:43 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:43 +0700] "GET /wp-content.php.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:44 +0700] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:26:44 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
195.242.212.190 - - [31/Aug/2025:17:26:44 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:45 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:45 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:45 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:46 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:46 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:46 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
195.242.212.190 - - [31/Aug/2025:17:26:46 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:47 +0700] "GET /fm.php/admin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:47 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
195.242.212.190 - - [31/Aug/2025:17:26:48 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:48 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:48 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:48 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:49 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:26:49 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:26:49 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
195.242.212.190 - - [31/Aug/2025:17:26:49 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:50 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:50 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:51 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:51 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:51 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:51 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:52 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:52 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:53 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:53 +0700] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:53 +0700] "GET /lv.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:54 +0700] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:54 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:54 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:55 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:55 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:55 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:55 +0700] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:56 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:56 +0700] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:56 +0700] "GET /admin.php?attempt=1 HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:57 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:57 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:57 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:26:57 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:58 +0700] "GET /classwithtostring.php/rbzccnnp.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:26:58 +0700] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:26:58 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:26:58 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
195.242.212.190 - - [31/Aug/2025:17:26:59 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:26:59 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
195.242.212.190 - - [31/Aug/2025:17:27:00 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
195.242.212.190 - - [31/Aug/2025:17:27:00 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:00 +0700] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
195.242.212.190 - - [31/Aug/2025:17:27:00 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:01 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:01 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:01 +0700] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
195.242.212.190 - - [31/Aug/2025:17:27:01 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:02 +0700] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
195.242.212.190 - - [31/Aug/2025:17:27:02 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:02 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:03 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:03 +0700] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:03 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
195.242.212.190 - - [31/Aug/2025:17:27:03 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:04 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:05 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:05 +0700] "GET /link.php/wp-includes/Text/network.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:05 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:05 +0700] "GET /cgi-bin/users.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:27:06 +0700] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:07 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:07 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
195.242.212.190 - - [31/Aug/2025:17:27:08 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:08 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:08 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:08 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:09 +0700] "GET /wp-error.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:09 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:09 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
195.242.212.190 - - [31/Aug/2025:17:27:10 +0700] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:10 +0700] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
195.242.212.190 - - [31/Aug/2025:17:27:10 +0700] "GET /admin/function.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
195.242.212.190 - - [31/Aug/2025:17:27:11 +0700] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:11 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
195.242.212.190 - - [31/Aug/2025:17:27:11 +0700] "GET /as/function.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:12 +0700] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:12 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:12 +0700] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:12 +0700] "GET /bala.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:13 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
195.242.212.190 - - [31/Aug/2025:17:27:13 +0700] "GET /man.php7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
195.242.212.190 - - [31/Aug/2025:17:27:13 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:14 +0700] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:14 +0700] "GET /wp-includes/mah.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:14 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:14 +0700] "GET /man.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:15 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:15 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:15 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:27:16 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:16 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:27:16 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:16 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:27:17 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:17 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:17 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:17 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:18 +0700] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:27:18 +0700] "GET /admin/autoload_classmap.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:19 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:19 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:19 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:27:19 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:20 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:20 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:20 +0700] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
195.242.212.190 - - [31/Aug/2025:17:27:20 +0700] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:21 +0700] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:21 +0700] "GET /theme.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:21 +0700] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:22 +0700] "GET /wp-admin/maint/users.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:22 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:22 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
195.242.212.190 - - [31/Aug/2025:17:27:22 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:23 +0700] "GET /wp-class.php/cux.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:23 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:23 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:23 +0700] "GET /wp-content/packed.php/wp-includes/Text/network.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:24 +0700] "GET /403.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:24 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
195.242.212.190 - - [31/Aug/2025:17:27:24 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:25 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:25 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:25 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:25 +0700] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:26 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:26 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
195.242.212.190 - - [31/Aug/2025:17:27:26 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:27:26 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:27 +0700] "GET /alfanew.php7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
195.242.212.190 - - [31/Aug/2025:17:27:27 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
195.242.212.190 - - [31/Aug/2025:17:27:28 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:28 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
195.242.212.190 - - [31/Aug/2025:17:27:28 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:28 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:29 +0700] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:29 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:30 +0700] "GET /config.php7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:30 +0700] "GET /wp-admin/update.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:30 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:31 +0700] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
195.242.212.190 - - [31/Aug/2025:17:27:31 +0700] "GET /wp-admin/user/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
195.242.212.190 - - [31/Aug/2025:17:27:31 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:31 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
195.242.212.190 - - [31/Aug/2025:17:27:32 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:32 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:32 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:32 +0700] "GET /admin/function.php/wp-content/uploads/json.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
195.242.212.190 - - [31/Aug/2025:17:27:33 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
195.242.212.190 - - [31/Aug/2025:17:27:33 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:27:34 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:34 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:35 +0700] "GET /meta.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:36 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:27:36 +0700] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:36 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:37 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:27:37 +0700] "GET /wp-2019.php/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:37 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:27:38 +0700] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:38 +0700] "GET /moon.php?fm=true HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:39 +0700] "GET /mango.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:39 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:39 +0700] "GET /wp-content/item.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:40 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:27:40 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/wp-2019.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:27:40 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:41 +0700] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:27:41 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:27:42 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:43 +0700] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:27:43 +0700] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:43 +0700] "GET /wp-content/plugins/xBrain.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:44 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:27:44 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:44 +0700] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:45 +0700] "GET /index.php?action=list&order=name&srt=yes HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:45 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:27:45 +0700] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:27:46 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:47 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:27:48 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:48 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:48 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:49 +0700] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:49 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:49 +0700] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:50 +0700] "GET /wp-includes/buy.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:27:50 +0700] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:52 +0700] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:53 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:27:53 +0700] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:54 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:54 +0700] "GET /modules/radio.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:54 +0700] "GET /wp-content/content.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:55 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:55 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:27:55 +0700] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:27:56 +0700] "GET /wp-links.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:58 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:27:59 +0700] "GET /wp-admin/admin-post.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:27:59 +0700] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:00 +0700] "GET /rbzccnnp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:00 +0700] "GET /images/chosen.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:00 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:28:01 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:01 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:28:02 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:02 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:28:02 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:28:03 +0700] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:28:03 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:04 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:05 +0700] "GET /wp-content/plugins/linkpreview/admin.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:06 +0700] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:06 +0700] "GET /wp-content/mah.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:07 +0700] "GET /disagraeosc.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:07 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:07 +0700] "GET /wp-crom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:08 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:09 +0700] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:09 +0700] "GET /cloud.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:10 +0700] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:10 +0700] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:11 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:11 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:11 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:12 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:12 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:13 +0700] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:28:13 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:14 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:14 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:28:14 +0700] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:15 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:28:16 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:16 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:16 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:28:17 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:18 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:18 +0700] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:19 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:20 +0700] "GET /wp-content/themes/pridmag/xBrain.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:28:20 +0700] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:20 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:21 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:21 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:21 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:22 +0700] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:22 +0700] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:23 +0700] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:23 +0700] "GET /class.php?fm=true HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:24 +0700] "GET /footer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:24 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:28:24 +0700] "GET /wikindex.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:28:25 +0700] "GET /.tmb/mariju.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:28:25 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:26 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:28:26 +0700] "GET /wordpress/about.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:26 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:27 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:27 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:28 +0700] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:28:29 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:29 +0700] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:28:29 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:30 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:30 +0700] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:31 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:31 +0700] "GET /wp-content/themes/admin%201.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:32 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:28:33 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:33 +0700] "GET /wp-content/themes/pridmag/xc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:34 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:35 +0700] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:35 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:36 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:36 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:28:36 +0700] "GET /menu.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:37 +0700] "GET /ws.php7 HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:39 +0700] "GET /layout.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:39 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:28:39 +0700] "GET /.well-known/link.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:28:40 +0700] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:40 +0700] "GET /link.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:40 +0700] "GET /TNT.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:41 +0700] "GET /wp-hoard.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:41 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:28:41 +0700] "GET /audit.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:28:41 +0700] "GET /olux.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:43 +0700] "GET /wp-checkbex.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:45 +0700] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:45 +0700] "GET /img/xmrlpc.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:28:47 +0700] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:47 +0700] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:48 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:28:48 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:48 +0700] "GET /wp-content/uploads/7.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:49 +0700] "GET /moded.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:49 +0700] "GET /wp-admin/user/content.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:50 +0700] "GET /wp-content/uploads/options-writing.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:28:50 +0700] "GET /wp-content/smaxx.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:50 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:28:51 +0700] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:51 +0700] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:28:51 +0700] "GET /wp-admin/images/mango.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:52 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:52 +0700] "GET /ynz.PhP7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:52 +0700] "GET /wp-includes/KailzVUDOBP.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:53 +0700] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:53 +0700] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:54 +0700] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:54 +0700] "GET /raf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:28:55 +0700] "GET /modules/modules/mod_simplefileuploadv1.3/404.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:55 +0700] "GET /wp-includes/php-compat/eew.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:56 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:28:56 +0700] "GET /moddofuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:56 +0700] "GET /function/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:58 +0700] "GET /cgi-bin/upfile.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:58 +0700] "GET /.well-known/as.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:28:58 +0700] "GET /products.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:59 +0700] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:28:59 +0700] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:59 +0700] "GET /yanznopat.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:28:59 +0700] "GET /wp-includes/class-wp-list-util-loop.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:00 +0700] "GET /plugins/send.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:00 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:00 +0700] "GET /sindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:29:00 +0700] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:01 +0700] "GET /wp-content/uploads/option.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:01 +0700] "GET /xhell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:02 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:29:02 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:02 +0700] "GET /cron_job.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:29:03 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:03 +0700] "GET /wp-add-admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:03 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:04 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:04 +0700] "GET /wp-content/uploads/link.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:29:04 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:05 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:05 +0700] "GET /upload/wp-info.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:06 +0700] "GET /cms.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:06 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:06 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:29:07 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:07 +0700] "GET /.well-known/acme-challenge HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:07 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:08 +0700] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:08 +0700] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:09 +0700] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:09 +0700] "GET /mailer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:09 +0700] "GET /wp-seo.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:29:10 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:29:10 +0700] "GET /ern1.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:10 +0700] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:10 +0700] "GET /inputs.php/wp-includes/Text/network.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:29:11 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:11 +0700] "GET /fm1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:11 +0700] "GET /4index.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:29:12 +0700] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:12 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:12 +0700] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:13 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:13 +0700] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:13 +0700] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:14 +0700] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:14 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:14 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:15 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:29:15 +0700] "GET /Assets/item.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:16 +0700] "GET /wp-includes/eew.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:16 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:16 +0700] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:17 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:17 +0700] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:17 +0700] "GET /fx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:18 +0700] "GET /Alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:18 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:18 +0700] "GET /css/cong.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:19 +0700] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:19 +0700] "GET /shop/lock.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:29:19 +0700] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:20 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:20 +0700] "GET /zz.php/wp-includes/wp-includes_function.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:29:20 +0700] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:21 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:21 +0700] "GET /wp-includes/log404.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:21 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:21 +0700] "GET /file2.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:29:22 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:29:22 +0700] "GET /epinyins.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:23 +0700] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:23 +0700] "GET /wp-admin/themes.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:23 +0700] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:23 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:24 +0700] "GET /anone.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:24 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:24 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:25 +0700] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:25 +0700] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:26 +0700] "GET /ern.PhP7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:26 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:26 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:27 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:27 +0700] "GET /wp-content/shell.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:27 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:29:28 +0700] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:29:28 +0700] "GET /edit-comments.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:29:28 +0700] "GET /s.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:29 +0700] "GET /assets/css/403.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:29 +0700] "GET /wp-content/themes/setup HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:29 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:30 +0700] "GET /xl2023.php.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:30 +0700] "GET /wp-includes/unix.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:30 +0700] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:30 +0700] "GET /wp-includes/wp-load.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:31 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:31 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:31 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:32 +0700] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:32 +0700] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:32 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:32 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:33 +0700] "GET /form.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:33 +0700] "GET /V5.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:33 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:29:34 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:34 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:35 +0700] "GET /leaf_php.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:36 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:29:36 +0700] "GET /xml.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:37 +0700] "GET /wp-includes/css/dist/list-reusable-blocks/themes.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:37 +0700] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:37 +0700] "GET /wp-configs.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:38 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:38 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:38 +0700] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:29:38 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:39 +0700] "GET /backup.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:39 +0700] "GET /.well-known/upfile.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:40 +0700] "GET /wp-admin/license.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:29:40 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:40 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:40 +0700] "GET /r3x.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:41 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:41 +0700] "GET /wp-content/uploads/ads.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:41 +0700] "GET /home.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:42 +0700] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:42 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:43 +0700] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:43 +0700] "GET /wp-includes/custom-plugin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:43 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:44 +0700] "GET /wp-content/plugins/zgdsfage/rk3.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:44 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:44 +0700] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:29:45 +0700] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:29:45 +0700] "GET /nav-menus.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:29:45 +0700] "GET /wp-includes/sts.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:46 +0700] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:46 +0700] "GET /cron.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:46 +0700] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:47 +0700] "GET /wp-admin/packed.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:47 +0700] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:48 +0700] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:48 +0700] "GET /uploader.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:48 +0700] "GET /in.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:48 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:49 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:29:49 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:29:50 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:50 +0700] "GET /wp2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:29:50 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:50 +0700] "GET /wp-includes/header.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:29:51 +0700] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:29:51 +0700] "GET /randkeyword.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:51 +0700] "GET /wp-includes/theme-compat HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:29:52 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:52 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:52 +0700] "GET /wp-admin/x.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:53 +0700] "GET /wso2.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:29:53 +0700] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:29:54 +0700] "GET /editor.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:54 +0700] "GET /assets/images/niil.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:29:54 +0700] "GET /xc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:54 +0700] "GET /sb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:55 +0700] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:55 +0700] "GET /srx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:55 +0700] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:56 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:56 +0700] "GET /wp-content/function.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:29:57 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:57 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:57 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:29:58 +0700] "GET /2index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:58 +0700] "GET /admin/upload/themes-install.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:29:58 +0700] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:29:59 +0700] "GET /dirs.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:59 +0700] "GET /legion.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:29:59 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:30:00 +0700] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:00 +0700] "GET /spam.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:01 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:01 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:30:01 +0700] "GET /wp-admin.phphttps:/diegun.com/autoload_classmap.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:30:01 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:02 +0700] "GET /bx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:02 +0700] "GET /upload/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:03 +0700] "GET /wp-content/themes/fitnessbase/404.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:03 +0700] "GET /logs.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:04 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:05 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:05 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:05 +0700] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:30:06 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:06 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:06 +0700] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:06 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:07 +0700] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:07 +0700] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:08 +0700] "GET /wp-admin/maint/unix.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:08 +0700] "GET /audio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:09 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:09 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:09 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:09 +0700] "GET /jquery.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:10 +0700] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:10 +0700] "GET /wp-content/plugins/linkpreview/404.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:10 +0700] "GET /img/dot.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:10 +0700] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:11 +0700] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:11 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:11 +0700] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:12 +0700] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:12 +0700] "GET /wp-content/plugins/zgdsfags/rk3.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:12 +0700] "GET /hitech-news.com HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:13 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:13 +0700] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:13 +0700] "GET /.fk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:13 +0700] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:14 +0700] "GET /wp-content/uploads/2014/was-wp.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:30:14 +0700] "GET /alfa-rex2.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:30:15 +0700] "GET /xxl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:15 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:15 +0700] "GET /images/404.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:15 +0700] "GET /server.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:30:16 +0700] "GET /cjfuns.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:16 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:16 +0700] "GET /upel.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:17 +0700] "GET /user.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:17 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:18 +0700] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:18 +0700] "GET /rxr.php?rxr HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:18 +0700] "GET /app.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:19 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:19 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:19 +0700] "GET /500.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:20 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:20 +0700] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:20 +0700] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:21 +0700] "GET /date.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:21 +0700] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:21 +0700] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:21 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:22 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:22 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:22 +0700] "GET /email.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:23 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:30:23 +0700] "GET /wp-content/languages/link.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:23 +0700] "GET /class.api.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:24 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:24 +0700] "GET /wp-admin/includes/ntfs.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:24 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:25 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:25 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:25 +0700] "GET /wp-content/wp-login.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:26 +0700] "GET /assets/images/cmd.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:26 +0700] "GET /wp-content/plugins/erinyani/asasx.php?p= HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:26 +0700] "GET /heh.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:26 +0700] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:27 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:27 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:28 +0700] "GET /resize.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:28 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:28 +0700] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:29 +0700] "GET /wp-confirm.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:29 +0700] "GET /new_license.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:29 +0700] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:29 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:30 +0700] "GET /sidwso.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:31 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:31 +0700] "GET /hinfofuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:31 +0700] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:31 +0700] "GET /index/wp-error_log.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:32 +0700] "GET /wp-content/plugins/zgdsfadsk/rk3.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:32 +0700] "GET /wp-content/themes/pridmag/asasx.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:32 +0700] "GET /api_download.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:33 +0700] "GET /w3llstore.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:33 +0700] "GET /wp-admin/css/admin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:33 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:34 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:35 +0700] "GET /wp-content/wso112233.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:35 +0700] "GET /lf.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:35 +0700] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:36 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:36 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:36 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:30:36 +0700] "GET /.well-known/lv.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:37 +0700] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:37 +0700] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:38 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:38 +0700] "GET /wp-includes/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:38 +0700] "GET /doc/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:38 +0700] "GET /.well-known/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:39 +0700] "GET /shells.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:39 +0700] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:39 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:40 +0700] "GET /swm.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:40 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:40 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:41 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:42 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:42 +0700] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:43 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:44 +0700] "GET /wp-admin/404.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:44 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:44 +0700] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:30:45 +0700] "GET /css/item.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:45 +0700] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:46 +0700] "GET /123.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:46 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:46 +0700] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:47 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:47 +0700] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:47 +0700] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:47 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:48 +0700] "GET /download.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:48 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:48 +0700] "GET /Sendemail.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:49 +0700] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:49 +0700] "GET /env.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:50 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:30:50 +0700] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:50 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:50 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:51 +0700] "GET /wp-includes/css.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:51 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:51 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:30:51 +0700] "GET /css/chosen.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:52 +0700] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:30:52 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:53 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:30:53 +0700] "GET /input.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:30:53 +0700] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:53 +0700] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:54 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:54 +0700] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:30:54 +0700] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:54 +0700] "GET /.well-known/cache-compat.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:55 +0700] "GET /js/style.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:55 +0700] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:30:55 +0700] "GET /ioxi001.PhP7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:56 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:30:56 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:30:56 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:57 +0700] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:30:57 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:30:57 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:57 +0700] "GET /file-manager.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:58 +0700] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:58 +0700] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:58 +0700] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:30:59 +0700] "GET /.well-known/amaxx.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:59 +0700] "GET /libraries/joomla/css.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:30:59 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:31:00 +0700] "GET /cgi-bin/radio.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:31:00 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:00 +0700] "GET /wp-content/atomlib.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:31:00 +0700] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:01 +0700] "GET /p.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:01 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:31:01 +0700] "GET /wp-logout.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:02 +0700] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:02 +0700] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:02 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:02 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:03 +0700] "GET /41.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:03 +0700] "GET /wp-content/plugins/mainhosting/asasx.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:03 +0700] "GET /wp-content/fw.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:03 +0700] "GET /settings.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:31:04 +0700] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:05 +0700] "GET /js_editor.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:05 +0700] "GET /images/buy.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:05 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:05 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:06 +0700] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:06 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:06 +0700] "GET /excel.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:07 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:07 +0700] "GET /wp-includes/network.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:07 +0700] "GET /optimizer.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:08 +0700] "GET /help.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:08 +0700] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:08 +0700] "GET /system_logs.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:31:08 +0700] "GET /view.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:09 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:31:09 +0700] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:09 +0700] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:09 +0700] "GET /image.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:10 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:31:10 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:31:10 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:11 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:11 +0700] "GET /debug.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:31:11 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:11 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:12 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:12 +0700] "GET /sx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:12 +0700] "GET /csv.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:12 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:13 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:13 +0700] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:14 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:31:14 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:14 +0700] "GET /uploads/up.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:14 +0700] "GET /01.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:15 +0700] "GET /luxx.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:15 +0700] "GET /admin-footer.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:15 +0700] "GET /wp-includes/css/a2.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:15 +0700] "GET /wp-cache.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:16 +0700] "GET /wp-includes/bak.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:16 +0700] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:16 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:17 +0700] "GET /wp-admin/css/sx.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:31:17 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:17 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:17 +0700] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:18 +0700] "GET /wp-includes/css/wp-config.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:18 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:18 +0700] "GET /deploy.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:19 +0700] "GET /3301.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:19 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:19 +0700] "GET /faq.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:31:19 +0700] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:31:20 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:20 +0700] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:20 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:20 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:21 +0700] "GET /new/transjule.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:21 +0700] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:22 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:22 +0700] "GET /wp-includes/css/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:22 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:22 +0700] "GET /logs_view.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:23 +0700] "GET /access.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:23 +0700] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:23 +0700] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:23 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:24 +0700] "GET /mailer1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:24 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:24 +0700] "GET /images/autoload_classmap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:25 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:25 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:25 +0700] "GET /wp-includes/repeater.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:25 +0700] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:26 +0700] "GET /wp-head.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:26 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:27 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:27 +0700] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:27 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:29 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:29 +0700] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:31:29 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:30 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:31:30 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:30 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:30 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:31 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:31 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:31:31 +0700] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:32 +0700] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:32 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:32 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:32 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:31:33 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:33 +0700] "GET /backup/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:31:33 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:33 +0700] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:34 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:34 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:35 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:31:35 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:31:35 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:36 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:36 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:36 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
103.103.98.20 - - [31/Aug/2025:17:31:37 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:37 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:37 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:37 +0700] "GET /vendor/ HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:38 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:38 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:38 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.103.98.20 - - [31/Aug/2025:17:31:39 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:39 +0700] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:39 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:39 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:40 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:40 +0700] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:40 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:41 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:41 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.103.98.20 - - [31/Aug/2025:17:31:41 +0700] "GET /assets/css/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:41 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:42 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:42 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:42 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:43 +0700] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:43 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:43 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:44 +0700] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:44 +0700] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:44 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:44 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:45 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:45 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:45 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:45 +0700] "GET /private/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:46 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:31:46 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:46 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:47 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:31:47 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:47 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:47 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:31:48 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:48 +0700] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:48 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:48 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:31:49 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:49 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:31:49 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:50 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:31:50 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:50 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:50 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:51 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:51 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:51 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:51 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:52 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:31:52 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:52 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:53 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:53 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:53 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:53 +0700] "GET /Site/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
103.103.98.20 - - [31/Aug/2025:17:31:54 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:54 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:54 +0700] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:55 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:55 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:55 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:56 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
103.103.98.20 - - [31/Aug/2025:17:31:56 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
103.103.98.20 - - [31/Aug/2025:17:31:56 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:56 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:57 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:57 +0700] "GET /index/function.php/img/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:57 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:58 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:58 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:59 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:31:59 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:31:59 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:32:00 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:00 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:00 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:01 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
103.103.98.20 - - [31/Aug/2025:17:32:01 +0700] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
103.103.98.20 - - [31/Aug/2025:17:32:01 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:02 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:32:02 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:32:02 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:32:02 +0700] "GET /autoloadclassmap.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:32:03 +0700] "GET /about/function.php/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:32:03 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:03 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
103.103.98.20 - - [31/Aug/2025:17:32:03 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:32:04 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:05 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
103.103.98.20 - - [31/Aug/2025:17:32:06 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
103.103.98.20 - - [31/Aug/2025:17:32:06 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:32:06 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
103.103.98.20 - - [31/Aug/2025:17:32:06 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
103.103.98.20 - - [31/Aug/2025:17:32:07 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
103.103.98.20 - - [31/Aug/2025:17:32:07 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
103.103.98.20 - - [31/Aug/2025:17:32:07 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
52.164.126.167 - - [31/Aug/2025:18:32:37 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:38 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:38 +0700] "GET /.well-known/about/function.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:39 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:39 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:39 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:40 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:41 +0700] "GET /12.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:41 +0700] "GET /13k.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:41 +0700] "GET /87.php HTTP/1.1" 301 1016 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:42 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:43 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:44 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:44 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:44 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:45 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:45 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:46 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:46 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:47 +0700] "GET /al.php HTTP/1.1" 301 1016 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:48 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:48 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:49 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:49 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:50 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:50 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:50 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:51 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:51 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:52 +0700] "GET /blog/fw.php HTTP/1.1" 301 1021 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:52 +0700] "GET /bugz.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:53 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:53 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:54 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:54 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:55 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:56 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:56 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:57 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:57 +0700] "GET /edit.php HTTP/1.1" 301 1018 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:58 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:58 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:59 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:59 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:32:59 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:00 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:00 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:00 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:01 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:01 +0700] "GET /g.php HTTP/1.1" 301 1015 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:02 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:03 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:05 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:05 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:06 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:06 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:07 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:07 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:08 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:08 +0700] "GET /inc.php HTTP/1.1" 301 1017 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:09 +0700] "GET /index.bak.php HTTP/1.1" 301 1060 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:09 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:10 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:10 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:11 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:11 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:12 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:12 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:12 +0700] "GET /mini HTTP/1.1" 301 1051 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:13 +0700] "GET /mini.php HTTP/1.1" 301 1018 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:15 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:15 +0700] "GET /ms-edit.php HTTP/1.1" 301 1058 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:16 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:16 +0700] "GET /options-general.php HTTP/1.1" 301 1066 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:16 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:17 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:18 +0700] "GET /ova.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:18 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:18 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:19 +0700] "GET /php8.php HTTP/1.1" 301 1018 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:19 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:20 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:20 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:21 +0700] "GET /rt.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:21 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:22 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:22 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:22 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:23 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:23 +0700] "GET /test1.php HTTP/1.1" 301 1019 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:24 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:25 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:25 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:26 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:28 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:28 +0700] "GET /wp-aa.php HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:29 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:29 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:29 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:30 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:31 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:33 +0700] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 1085 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:33 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:33 +0700] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 1075 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:34 +0700] "GET /wp-admin/includes/header.php HTTP/1.1" 301 1075 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:35 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:36 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:36 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:37 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:37 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1039 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:38 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:38 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:39 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:39 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:40 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 1069 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:40 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:40 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:41 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:41 +0700] "GET /wp-comments.php HTTP/1.1" 301 1062 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:41 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1026 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:42 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:44 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:45 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:45 +0700] "GET /wp-content/click.php HTTP/1.1" 301 1067 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:45 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:46 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:46 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:46 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:47 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:47 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1051 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:48 +0700] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:51 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:51 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:51 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:52 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 1076 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:52 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:53 +0700] "GET /wp-content/uploads/json.php HTTP/1.1" 301 1074 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:53 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:54 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:54 +0700] "GET /wp-error.php HTTP/1.1" 301 1022 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:55 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:55 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:56 +0700] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 1073 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:56 +0700] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:56 +0700] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 1079 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:57 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:57 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:58 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1084 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:58 +0700] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 1086 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:59 +0700] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 1045 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:33:59 +0700] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:01 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:01 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:02 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:03 +0700] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:04 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:05 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:06 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:06 +0700] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:06 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1034 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:07 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:08 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:08 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:09 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:09 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:09 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:10 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:10 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:11 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:11 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1029 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:12 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:13 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:13 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.164.126.167 - - [31/Aug/2025:18:34:14 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:49 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:51 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:51 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:52 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:53 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:53 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:53 +0700] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 1085 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:54 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:54 +0700] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 1075 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:55 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1040 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:55 +0700] "GET /wp-admin/includes/header.php HTTP/1.1" 301 1075 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:56 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:56 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:57 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:57 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:57 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:58 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:58 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:58 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:59 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1038 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:42:59 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 1069 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:00 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:00 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:01 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:01 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:03 +0700] "GET /wp-comments.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:04 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:05 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:05 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:06 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1042 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:06 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:07 +0700] "GET /wp-content/click.php HTTP/1.1" 301 1067 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:07 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:07 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:08 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:08 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:09 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:09 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:10 +0700] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:10 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1071 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:11 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:12 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:13 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 1076 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:13 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:14 +0700] "GET /wp-content/uploads/json.php HTTP/1.1" 301 1074 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:14 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:14 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:15 +0700] "GET /wp-error.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:15 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:16 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1047 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:17 +0700] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 1073 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:18 +0700] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:18 +0700] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 1079 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:19 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:20 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:20 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1084 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:20 +0700] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 1086 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:21 +0700] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 1082 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:21 +0700] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:22 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1037 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:22 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:23 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:23 +0700] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:24 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:24 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:24 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:25 +0700] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:25 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:26 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:26 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:27 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:28 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:29 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:29 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:30 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:30 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:30 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:31 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:31 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:32 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:32 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:34 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:34 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:35 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:35 +0700] "GET /.well-known/about/function.php HTTP/1.1" 301 1077 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:35 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:36 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:36 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:37 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:37 +0700] "GET /12.php HTTP/1.1" 301 1016 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:37 +0700] "GET /13k.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:38 +0700] "GET /87.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:39 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:39 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:39 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:40 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:40 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:40 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:41 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:42 +0700] "GET /akc.php HTTP/1.1" 301 1017 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:42 +0700] "GET /xleet HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:43 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:44 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:45 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:46 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:46 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:47 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:47 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:47 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:48 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1040 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:48 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:49 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:49 +0700] "GET /bugz.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:50 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:50 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:50 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:51 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:52 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:53 +0700] "GET /css.php HTTP/1.1" 301 1017 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:53 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:54 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:55 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:55 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:56 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:56 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:57 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:57 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:58 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:59 +0700] "GET /fox.php HTTP/1.1" 301 1017 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:43:59 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:00 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:00 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:00 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:01 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:01 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:02 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:02 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:02 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:03 +0700] "GET /images/admin.php HTTP/1.1" 301 1026 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:04 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:04 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:05 +0700] "GET /index.bak.php HTTP/1.1" 301 1060 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:05 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:05 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:06 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:06 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:07 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:07 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:07 +0700] "GET /mar.php HTTP/1.1" 301 1017 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:08 +0700] "GET /mini HTTP/1.1" 301 1051 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:09 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:09 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:09 +0700] "GET /ms-edit.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:10 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:10 +0700] "GET /options-general.php HTTP/1.1" 301 1066 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:10 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:11 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:12 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:12 +0700] "GET /wp-blog.php HTTP/1.1" 301 1021 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:13 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:13 +0700] "GET /wp-activat.php HTTP/1.1" 301 1061 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:14 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:14 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:15 +0700] "GET /nf.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:15 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:15 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:16 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:16 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:16 +0700] "GET /php8.php HTTP/1.1" 301 1018 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:17 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:17 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:18 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:19 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:19 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:19 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:20 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:20 +0700] "GET /thoms.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:20 +0700] "GET /rt.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:21 +0700] "GET /s.php HTTP/1.1" 301 1015 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:21 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:22 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:23 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:23 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:24 +0700] "GET /test1.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:25 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:25 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:25 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:26 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:26 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "-"
135.220.12.207 - - [31/Aug/2025:18:44:27 +0700] "GET /wp-aa.php HTTP/1.1" 301 1056 "-" "-"
185.12.249.39 - - [31/Aug/2025:20:26:12 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
5.133.192.212 - - [31/Aug/2025:20:26:18 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
198.235.24.13 - - [31/Aug/2025:23:16:04 +0700] "GET / HTTP/1.1" 301 1051 "-" "-"
110.172.98.2 - - [31/Aug/2025:23:28:55 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:32 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:33 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:33 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:33 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:33 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:34 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:25:34 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:34 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:25:34 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:35 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:25:35 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:25:35 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:36 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:36 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:36 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:25:36 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:25:37 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:25:37 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:37 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:37 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:38 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:25:38 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:25:38 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:39 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:25:39 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:39 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:40 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:25:40 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:25:40 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:41 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:25:41 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:41 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:42 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:42 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:25:42 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:25:42 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:43 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:43 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:43 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:25:43 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:25:44 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:44 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:25:44 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:25:44 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:45 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:45 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:45 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:45 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:25:46 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:46 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:46 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:47 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:47 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:25:47 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:47 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:48 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:25:48 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:48 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:48 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:49 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:49 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:50 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:50 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:50 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:50 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:50 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:51 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:51 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:51 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:51 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:52 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:25:52 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:52 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:25:53 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:25:53 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:53 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:54 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:25:54 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:54 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:54 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:25:55 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:55 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:25:55 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:56 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:56 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:56 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:56 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:56 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:25:57 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:57 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:57 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:25:58 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:25:58 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:58 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:58 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:25:59 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:25:59 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:59 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:25:59 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:00 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:00 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:00 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:01 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:26:01 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:01 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:02 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:02 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:02 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:02 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:26:03 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:03 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:03 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:04 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:04 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:04 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:04 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:05 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:05 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:05 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:05 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:26:06 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:06 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:06 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:07 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:26:07 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:07 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:26:08 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:08 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:08 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:08 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:09 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:09 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:26:09 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:10 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:10 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:10 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:10 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:11 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:11 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:11 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:12 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:12 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:12 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:12 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:13 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:13 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:13 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:13 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:14 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:14 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:15 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:15 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:15 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:26:15 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:16 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:26:16 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:16 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:16 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:17 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:26:17 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:17 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:18 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:26:18 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:26:18 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:18 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:19 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:19 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:19 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:19 +0700] "GET /images/class.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:20 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:20 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:20 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:21 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:21 +0700] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:21 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:21 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:22 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:26:22 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:26:22 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:23 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:26:23 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:23 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:24 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:24 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:24 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:24 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:26:25 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:25 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:25 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:25 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:26 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:26 +0700] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:26 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:26:27 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:27 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:27 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:27 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:28 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:28 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:28 +0700] "GET /config.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:29 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:29 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:29 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
180.149.228.166 - - [01/Sep/2025:02:26:29 +0700] "GET /edit-tags.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:30 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:30 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:30 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:30 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:26:30 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:31 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:31 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:31 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:32 +0700] "GET /webdb.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:32 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:32 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:26:32 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:33 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:33 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:33 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:33 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:34 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:34 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:34 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:35 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:35 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:35 +0700] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:36 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:36 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
180.149.228.166 - - [01/Sep/2025:02:26:36 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:36 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:37 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:26:37 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:37 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:38 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:38 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:38 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:38 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:39 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:26:39 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:39 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:40 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:40 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:40 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:40 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:41 +0700] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:41 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:41 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:26:41 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:42 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:42 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:42 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:43 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:43 +0700] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:43 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:43 +0700] "GET /sallu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:44 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:44 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:26:44 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:26:45 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:45 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:45 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:46 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:46 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:46 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:46 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:47 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:26:47 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:47 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:48 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:48 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:48 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:26:49 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:26:49 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:49 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:50 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:50 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:50 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:50 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:26:50 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:26:51 +0700] "GET /hehehehe.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:51 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:52 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:52 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:52 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:52 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:53 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:53 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:53 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:53 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:26:54 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:54 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:54 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:55 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:55 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:55 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:26:56 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:26:56 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:56 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:56 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:56 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:26:58 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:58 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:58 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:26:58 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:59 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:59 +0700] "GET /thumbs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:26:59 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:26:59 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:00 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:00 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:01 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:01 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:01 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:02 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:27:02 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:02 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:02 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:03 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:03 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:03 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:04 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:04 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:04 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:05 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:27:05 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:05 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:27:05 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:06 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:06 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:27:06 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:07 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:07 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:07 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:08 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:08 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:08 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:08 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:09 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:09 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:27:09 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:27:10 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:10 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:27:10 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:10 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:11 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:11 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:11 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:12 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:12 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:12 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:13 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:13 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
180.149.228.166 - - [01/Sep/2025:02:27:13 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:13 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:27:14 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:14 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:14 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:27:14 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:15 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:15 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:15 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:16 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:16 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:16 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:27:16 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:17 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:17 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:17 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:18 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:18 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:18 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:19 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:19 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:19 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:19 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:20 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:27:20 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:27:20 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:21 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:21 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:22 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:22 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:22 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:22 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:23 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:23 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:23 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:23 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:27:24 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:24 +0700] "GET /fonts/database.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:25 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:25 +0700] "GET /css/js1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:25 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:25 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:26 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:27:26 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:26 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:27 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:27 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:27 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:27:28 +0700] "GET /assets/sandi-amir.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:27:28 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:28 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:28 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:29 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:29 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:29 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:30 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:30 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:30 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:31 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:31 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:31 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:27:31 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:27:32 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:32 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:32 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:33 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:33 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:33 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:27:34 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:34 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:34 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:34 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:35 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:35 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:27:35 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:36 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:36 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:36 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:37 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
180.149.228.166 - - [01/Sep/2025:02:27:37 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:37 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:37 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
180.149.228.166 - - [01/Sep/2025:02:27:38 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:38 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:38 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:39 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:39 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:39 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:40 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:40 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:40 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:41 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:41 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:41 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:42 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:27:42 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:42 +0700] "GET /sim.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:42 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:43 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:27:43 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:44 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
180.149.228.166 - - [01/Sep/2025:02:27:44 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:45 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:45 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:27:47 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
180.149.228.166 - - [01/Sep/2025:02:27:48 +0700] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:48 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:49 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:49 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:27:50 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:50 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:50 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:27:50 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:51 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:51 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:51 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:52 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
180.149.228.166 - - [01/Sep/2025:02:27:52 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:52 +0700] "GET /wp-content/maw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:27:53 +0700] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:53 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:27:53 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
180.149.228.166 - - [01/Sep/2025:02:27:53 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:54 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:54 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
180.149.228.166 - - [01/Sep/2025:02:27:54 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:55 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
180.149.228.166 - - [01/Sep/2025:02:27:55 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:55 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:56 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:56 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:56 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:57 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:27:57 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:27:57 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:58 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
180.149.228.166 - - [01/Sep/2025:02:27:58 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
180.149.228.166 - - [01/Sep/2025:02:27:58 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:27:59 +0700] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
180.149.228.166 - - [01/Sep/2025:02:27:59 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:27:59 +0700] "GET /waf_defender.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:00 +0700] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:00 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:00 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:28:00 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:01 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
180.149.228.166 - - [01/Sep/2025:02:28:01 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
180.149.228.166 - - [01/Sep/2025:02:28:02 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:02 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
180.149.228.166 - - [01/Sep/2025:02:28:02 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
180.149.228.166 - - [01/Sep/2025:02:28:03 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:03 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
180.149.228.166 - - [01/Sep/2025:02:28:03 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:04 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /css/av.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:05 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /bk/index.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:06 +0700] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:07 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:07 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:07 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:07 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:07 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.101.18 - - [01/Sep/2025:02:28:08 +0700] "GET /assets/11.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:09 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:10 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:11 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:12 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.101.18 - - [01/Sep/2025:02:28:13 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:13 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:13 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:13 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:14 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:14 +0700] "GET /wp-content/languages/fucku.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:14 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:14 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:14 +0700] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:15 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:16 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:17 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /memberfuns.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /wp-comments-pos.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:18 +0700] "GET /testsend.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:19 +0700] "GET /teamx.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.101.18 - - [01/Sep/2025:02:28:19 +0700] "GET /aios/firewall-rules/settings.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:19 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:19 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:19 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /brutecp-3x-NETDRUG.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /nation.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /wh/glass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:20 +0700] "GET /live/i.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:21 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:21 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:21 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:21 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:21 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:22 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:22 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:22 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:22 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:22 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:23 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.101.18 - - [01/Sep/2025:02:28:24 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:24 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:24 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:24 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:25 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:26 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:26 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:26 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:26 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:27 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:27 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:27 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:27 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.101.18 - - [01/Sep/2025:02:28:28 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:28 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:28 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:29 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:29 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:30 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:30 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:30 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:30 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:31 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:31 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.101.18 - - [01/Sep/2025:02:28:31 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:32 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:32 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:33 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /upload/image/ HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:34 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:35 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:36 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.101.18 - - [01/Sep/2025:02:28:36 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:36 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:37 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:38 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:38 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:38 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:39 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:39 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:39 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:40 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.101.18 - - [01/Sep/2025:02:28:40 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:40 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:40 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:40 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:41 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:41 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:41 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:41 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.101.18 - - [01/Sep/2025:02:28:41 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:42 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:42 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:42 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:42 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:42 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:43 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:44 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:44 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:44 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:44 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:44 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:45 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:46 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.101.18 - - [01/Sep/2025:02:28:46 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:46 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.101.18 - - [01/Sep/2025:02:28:47 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:48 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:49 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:50 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:50 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.101.18 - - [01/Sep/2025:02:28:50 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:50 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.101.18 - - [01/Sep/2025:02:28:50 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:51 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:51 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:51 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:51 +0700] "GET /wp-includes/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:52 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:53 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:54 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:54 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:54 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:54 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.101.18 - - [01/Sep/2025:02:28:54 +0700] "GET /fonts/ HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:55 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.101.18 - - [01/Sep/2025:02:28:56 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:56 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:56 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:56 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:56 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:57 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.101.18 - - [01/Sep/2025:02:28:57 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:57 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:57 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:58 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:58 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:58 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:58 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.101.18 - - [01/Sep/2025:02:28:59 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
52.147.67.11 - - [01/Sep/2025:09:22:08 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /class-wp-header.php HTTP/1.1" 301 1066 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /re.php HTTP/1.1" 301 1053 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /images/Marvins.php HTTP/1.1" 301 1065 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:09 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:10 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:10 +0700] "GET /sty.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:10 +0700] "GET /post.php HTTP/1.1" 301 1018 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:10 +0700] "GET /wp/sih.php HTTP/1.1" 301 1057 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:10 +0700] "GET /wp-xml.php HTTP/1.1" 301 1057 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /pn.php HTTP/1.1" 301 1053 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /wp-admin/doc.php HTTP/1.1" 301 1063 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /dox.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:11 +0700] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 301 1076 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:12 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:12 +0700] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 1056 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:12 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:12 +0700] "GET /JPG.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:13 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
52.147.67.11 - - [01/Sep/2025:09:22:13 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 1075 "-" "-"
87.251.78.46 - - [01/Sep/2025:13:36:54 +0700] "GET /phpinfo HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:55 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:56 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:56 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:56 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:57 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:57 +0700] "GET /php_info.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:58 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:58 +0700] "GET /pi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:59 +0700] "GET /config.phpinfo HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:36:59 +0700] "GET /admin/phpinfo.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:00 +0700] "GET /.aws/credentials HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:00 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:01 +0700] "GET /phpinfo2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:04 +0700] "GET /php_version.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:06 +0700] "GET /version.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:06 +0700] "GET /server-info.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:06 +0700] "GET /env.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [01/Sep/2025:13:37:07 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
178.128.16.200 - - [01/Sep/2025:22:31:06 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
178.128.16.200 - - [01/Sep/2025:22:31:08 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
178.128.16.200 - - [01/Sep/2025:22:31:11 +0700] "GET /readme.html HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
173.239.236.16 - - [01/Sep/2025:22:31:37 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
156.146.48.144 - - [01/Sep/2025:23:36:10 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1026 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /moon.php= HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /star.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:48 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /goto.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /a3.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /ay.php HTTP/1.1" 301 1016 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /00.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /moon.php?p= HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /readme.php HTTP/1.1" 301 1020 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:49 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:50 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:50 +0700] "GET /ty.php?p= HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /inputs.php?p= HTTP/1.1" 301 1060 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /wp-admin/maint/about.php?p= HTTP/1.1" 301 1074 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /g3.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /fw.php HTTP/1.1" 301 1016 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /gel4y.php? HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:51 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /let.php HTTP/1.1" 301 1017 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /af32.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /new2.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /hob.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /ase.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:52 +0700] "GET /okk.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /ola.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /yee.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /msg.php HTTP/1.1" 301 1017 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /eru.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /2eaa2.php HTTP/1.1" 301 1056 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /ave.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /pow.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /dds.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /acme.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 1026 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /class-db.php HTTP/1.1" 301 1059 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /bak.php?p= HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:53 +0700] "GET /style2.php HTTP/1.1" 301 1057 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /end.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /uplozyu.php HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /icon.php HTTP/1.1" 301 1018 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /searchl.php HTTP/1.1" 301 1058 "-" "-"
52.163.190.179 - - [02/Sep/2025:00:02:54 +0700] "GET /504.php HTTP/1.1" 301 1054 "-" "-"
178.128.16.200 - - [02/Sep/2025:02:23:28 +0700] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:31 +0700] "GET /Chitoge.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:34 +0700] "GET /yuuki.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:37 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:39 +0700] "GET /.fk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:42 +0700] "GET /.tmb/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:45 +0700] "GET /.tmb/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:47 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:50 +0700] "GET /.tmb/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:53 +0700] "GET /.tmb/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:55 +0700] "GET /.tmb/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:23:58 +0700] "GET /.tmbadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:01 +0700] "GET /.tmbalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:04 +0700] "GET /.tmbbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:07 +0700] "GET /.tmbk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:10 +0700] "GET /.tmbwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:12 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:15 +0700] "GET /.well-known/404.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:18 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:20 +0700] "GET /.well-known/a.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:23 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:26 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:28 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:30 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:33 +0700] "GET /.well-known/acme-challenge/alfa.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:36 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:38 +0700] "GET /.well-known/acme-challenge/bypass.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:41 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:43 +0700] "GET /.well-known/acme-challenge/k.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:46 +0700] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:48 +0700] "GET /.well-known/acme-challenge/wp.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:51 +0700] "GET /.well-known/acme-challengeadmin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:53 +0700] "GET /.well-known/acme-challengealfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:55 +0700] "GET /.well-known/acme-challengebypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:24:57 +0700] "GET /.well-known/acme-challengek.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:00 +0700] "GET /.well-known/acme-challengewp.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:04 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:06 +0700] "GET /.well-known/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:08 +0700] "GET /.well-known/am.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:10 +0700] "GET /.well-known/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:12 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:15 +0700] "GET /.well-known/fw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:17 +0700] "GET /.well-known/gelay.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:19 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:21 +0700] "GET /.well-known/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:24 +0700] "GET /.well-known/leaf.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:26 +0700] "GET /.well-known/leafmailer.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:28 +0700] "GET /.well-known/leafmailer2.8.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:30 +0700] "GET /.well-known/mari.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:33 +0700] "GET /.well-known/maro.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:35 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:37 +0700] "GET /.well-known/pki-validation/alfa.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:39 +0700] "GET /.well-known/pki-validation/bypass.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:41 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:44 +0700] "GET /.well-known/pki-validation/k.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:46 +0700] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:49 +0700] "GET /.well-known/pki-validation/wp.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:52 +0700] "GET /.well-known/pki-validationadmin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:55 +0700] "GET /.well-known/pki-validationalfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:25:58 +0700] "GET /.well-known/pki-validationbypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:00 +0700] "GET /.well-known/pki-validationk.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:04 +0700] "GET /.well-known/pki-validationwp.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:07 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:09 +0700] "GET /.well-known/shell.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:12 +0700] "GET /.well-known/upl.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:14 +0700] "GET /.well-known/wp-signup.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:17 +0700] "GET /.well-known/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:20 +0700] "GET /.well-known/x.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:23 +0700] "GET /.well-knownadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:25 +0700] "GET /.well-knownalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:28 +0700] "GET /.well-knownbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:29 +0700] "GET /.well-knownk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:32 +0700] "GET /.well-knownold/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:34 +0700] "GET /.well-knownwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:36 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:39 +0700] "GET /images/sym.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:41 +0700] "GET /wp-content/a.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:43 +0700] "GET /wp-content/fm.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:46 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:49 +0700] "GET /01.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:51 +0700] "GET /07.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:53 +0700] "GET /098.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:56 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:26:57 +0700] "GET /0o.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:00 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:02 +0700] "GET /0x0.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:04 +0700] "GET /0z.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:07 +0700] "GET /1.aspx HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:10 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:12 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:14 +0700] "GET /100.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:16 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:19 +0700] "GET /1100.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:21 +0700] "GET /1111.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:23 +0700] "GET /11index.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:26 +0700] "GET /12.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:28 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:30 +0700] "GET /1234.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:33 +0700] "GET /12r4jd.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:35 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:37 +0700] "GET /1313.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:40 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:42 +0700] "GET /14.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:44 +0700] "GET /15.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:47 +0700] "GET /159.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:49 +0700] "GET /16.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:51 +0700] "GET /17.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:54 +0700] "GET /18.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:56 +0700] "GET /1877.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:27:58 +0700] "GET /19.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:02 +0700] "GET /1945.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:04 +0700] "GET /1975.phP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:07 +0700] "GET /1975.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:10 +0700] "GET /1975.php?CVE=2021 HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:13 +0700] "GET /1975.php?CVE=2022 HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:15 +0700] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:17 +0700] "GET /1@.pHtml HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:20 +0700] "GET /1@.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:24 +0700] "GET /1index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:26 +0700] "GET /1index.php?pass=shell HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:29 +0700] "GET /1nt3pqdk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:31 +0700] "GET /1xleet.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:33 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:36 +0700] "GET /20.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:39 +0700] "GET /21.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:42 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:45 +0700] "GET /23.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:47 +0700] "GET /24.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:49 +0700] "GET /25.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:51 +0700] "GET /2index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:54 +0700] "GET /2index.php?pass=shell HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:56 +0700] "GET /2s90o.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:28:59 +0700] "GET /2xmpz0.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:01 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:03 +0700] "GET /301.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:06 +0700] "GET /303.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:09 +0700] "GET /3301.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:11 +0700] "GET /3index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:14 +0700] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:16 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:19 +0700] "GET /401.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:22 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:26 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:28 +0700] "GET /404webshell.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:30 +0700] "GET /405.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:32 +0700] "GET /41.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:34 +0700] "GET /45.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:37 +0700] "GET /4index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:39 +0700] "GET /4lin.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:41 +0700] "GET /4mosan.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:44 +0700] "GET /4price.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:46 +0700] "GET /4x4.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:49 +0700] "GET /5.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:52 +0700] "GET /529.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:54 +0700] "GET /5index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:56 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:29:59 +0700] "GET /63ck0.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:02 +0700] "GET /6index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:05 +0700] "GET /7.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:07 +0700] "GET /73.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:11 +0700] "GET /777.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:14 +0700] "GET /78.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:16 +0700] "GET /7index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:19 +0700] "GET /7root.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:21 +0700] "GET /7yn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:24 +0700] "GET /8.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:26 +0700] "GET /87.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:29 +0700] "GET /88.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:31 +0700] "GET /888.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:34 +0700] "GET /8890.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:36 +0700] "GET /8index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:38 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:42 +0700] "GET /991176.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:45 +0700] "GET /9index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:48 +0700] "GET /?loadmebaby HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:51 +0700] "GET /AK-74.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:53 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:56 +0700] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:30:58 +0700] "GET /ALFA_DATA/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:01 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:04 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:07 +0700] "GET /ALFA_DATA/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:09 +0700] "GET /ALFA_DATA/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:13 +0700] "GET /ALFA_DATA/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:16 +0700] "GET /ALFA_DATA/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:18 +0700] "GET /ALFA_DATAadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:22 +0700] "GET /ALFA_DATAalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:24 +0700] "GET /ALFA_DATAbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:26 +0700] "GET /ALFA_DATAk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:28 +0700] "GET /ALFA_DATAwp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:31 +0700] "GET /Admin-ajax.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:33 +0700] "GET /Alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:35 +0700] "GET /Alfashell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:38 +0700] "GET /Alfawso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:40 +0700] "GET /Anonsec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:43 +0700] "GET /Bulle.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:46 +0700] "GET /Byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:49 +0700] "GET /D7.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:51 +0700] "GET /DC.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:54 +0700] "GET /Dz.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:57 +0700] "GET /FX.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:31:59 +0700] "GET /Fdbxhriw.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:05 +0700] "GET /FoxWSO-full.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:07 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:09 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:12 +0700] "GET /FoxWSOv2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:15 +0700] "GET /Gel.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:17 +0700] "GET /Idx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:22 +0700] "GET /IndoXploit.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:24 +0700] "GET /Init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:26 +0700] "GET /Leaf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:28 +0700] "GET /M1.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:31 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:33 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:35 +0700] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:38 +0700] "GET /MyShell.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:40 +0700] "GET /Ninja.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:42 +0700] "GET /PHP_Shell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:44 +0700] "GET /Priv.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:46 +0700] "GET /RxR.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:49 +0700] "GET /Sendemail.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:52 +0700] "GET /Simple_PHP_backdoor.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:55 +0700] "GET /Uploader.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:32:57 +0700] "GET /Uploading.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:00 +0700] "GET /V3.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:02 +0700] "GET /V5.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:06 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:08 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:10 +0700] "GET /Xzd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:13 +0700] "GET /a.aspx HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:16 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:19 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:21 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:23 +0700] "GET /aab.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:26 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:29 +0700] "GET /abby.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:32 +0700] "GET /abc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:34 +0700] "GET /abcde.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:37 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:39 +0700] "GET /about.php?520 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:42 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:45 +0700] "GET /aci.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:47 +0700] "GET /adm.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:51 +0700] "GET /adm/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:53 +0700] "GET /admadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:55 +0700] "GET /admalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:57 +0700] "GET /admbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:33:59 +0700] "GET /admin-heade.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:02 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:05 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:07 +0700] "GET /admin/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:09 +0700] "GET /admin/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:12 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:14 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:16 +0700] "GET /admin/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:19 +0700] "GET /admin/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:22 +0700] "GET /admin1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:24 +0700] "GET /admin403.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:27 +0700] "GET /admin404.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:29 +0700] "GET /adminadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:32 +0700] "GET /adminalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:34 +0700] "GET /adminbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:37 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:39 +0700] "GET /administrator/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:42 +0700] "GET /administrator/alfa.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:44 +0700] "GET /administrator/bypass.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:46 +0700] "GET /administrator/index.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:48 +0700] "GET /administrator/k.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:51 +0700] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:54 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:56 +0700] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:34:59 +0700] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:02 +0700] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:05 +0700] "GET /administrator/wp.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:08 +0700] "GET /administratoradmin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:10 +0700] "GET /administratoralfa.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:13 +0700] "GET /administratorbypass.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:15 +0700] "GET /administratork.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:18 +0700] "GET /administratorwp.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:20 +0700] "GET /admink.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:22 +0700] "GET /adminweb/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:24 +0700] "GET /adminweb/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:27 +0700] "GET /adminweb/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:29 +0700] "GET /adminweb/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:31 +0700] "GET /adminweb/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:34 +0700] "GET /adminweb/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:36 +0700] "GET /adminwebadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:40 +0700] "GET /adminwebalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:43 +0700] "GET /adminwebbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:46 +0700] "GET /adminwebk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:48 +0700] "GET /adminwebwp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:51 +0700] "GET /adminwp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:55 +0700] "GET /admk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:35:58 +0700] "GET /admnin/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:00 +0700] "GET /admnin/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:03 +0700] "GET /admnin/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:06 +0700] "GET /admnin/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:09 +0700] "GET /admnin/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:11 +0700] "GET /admnin/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:13 +0700] "GET /admwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:16 +0700] "GET /adriv.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:18 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:21 +0700] "GET /ah.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:23 +0700] "GET /ak.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:26 +0700] "GET /ak47shell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:29 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:32 +0700] "GET /alex.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:34 +0700] "GET /alexus-mailer.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:37 +0700] "GET /alexus.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:40 +0700] "GET /alexuse.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:42 +0700] "GET /alexusmailer-2.0.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:45 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:47 +0700] "GET /alf4.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:49 +0700] "GET /alf42.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:52 +0700] "GET /alfa-ioxi.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:54 +0700] "GET /alfa-shell-v4.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:57 +0700] "GET /alfa-v4.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:36:59 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:02 +0700] "GET /alfa1.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:04 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:07 +0700] "GET /alfa1337.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:10 +0700] "GET /alfa3.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:12 +0700] "GET /alfaaneh.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:14 +0700] "GET /alfacgiapi/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:16 +0700] "GET /alfacgiapi/alfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:18 +0700] "GET /alfacgiapi/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:20 +0700] "GET /alfacgiapi/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:23 +0700] "GET /alfacgiapi/k.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:25 +0700] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:28 +0700] "GET /alfacgiapi/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:30 +0700] "GET /alfacgiapiadmin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:33 +0700] "GET /alfacgiapialfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:36 +0700] "GET /alfacgiapibypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:38 +0700] "GET /alfacgiapik.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:40 +0700] "GET /alfacgiapiwp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:42 +0700] "GET /alfaindex.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:45 +0700] "GET /alfakun.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:47 +0700] "GET /alfalonte.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:50 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:52 +0700] "GET /alfanibos.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:54 +0700] "GET /alfashell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:57 +0700] "GET /alfatesla.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:37:59 +0700] "GET /alfateslav4.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:02 +0700] "GET /alfav4-1-0.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:04 +0700] "GET /alfav4-1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:07 +0700] "GET /alfav4-1.tesla.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:10 +0700] "GET /alfav4.1-tesla.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:12 +0700] "GET /alfav4.1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:15 +0700] "GET /alfax.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:17 +0700] "GET /alfi.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:20 +0700] "GET /alivos.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:23 +0700] "GET /alpa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:25 +0700] "GET /alpha.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:28 +0700] "GET /alwso.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:31 +0700] "GET /am.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:33 +0700] "GET /am4n.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:36 +0700] "GET /aman.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:38 +0700] "GET /anjay.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:41 +0700] "GET /anon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:44 +0700] "GET /anone.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:49 +0700] "GET /anons79.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:52 +0700] "GET /anonsec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:54 +0700] "GET /anonym.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:56 +0700] "GET /ans.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:38:59 +0700] "GET /antek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:01 +0700] "GET /antiheker.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:03 +0700] "GET /ap.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:07 +0700] "GET /app/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:09 +0700] "GET /app/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:12 +0700] "GET /app/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:16 +0700] "GET /app/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:18 +0700] "GET /app/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:21 +0700] "GET /app/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:24 +0700] "GET /appadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:27 +0700] "GET /appalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:30 +0700] "GET /appbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:32 +0700] "GET /appk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:35 +0700] "GET /application/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:37 +0700] "GET /application/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:40 +0700] "GET /application/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:42 +0700] "GET /application/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:44 +0700] "GET /application/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:46 +0700] "GET /application/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:48 +0700] "GET /applicationadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:50 +0700] "GET /applicationalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:53 +0700] "GET /applicationbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:55 +0700] "GET /applicationk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:39:57 +0700] "GET /applicationwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:01 +0700] "GET /appwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:05 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:06 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:08 +0700] "GET /as/function HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:11 +0700] "GET /asd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:14 +0700] "GET /aset/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:17 +0700] "GET /aset/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:20 +0700] "GET /aset/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:23 +0700] "GET /aset/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:25 +0700] "GET /aset/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:27 +0700] "GET /aset/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:31 +0700] "GET /asetadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:34 +0700] "GET /asetalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:36 +0700] "GET /asetbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:39 +0700] "GET /asetk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:41 +0700] "GET /asetwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:43 +0700] "GET /asset/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:46 +0700] "GET /asset/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:48 +0700] "GET /asset/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:51 +0700] "GET /asset/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:53 +0700] "GET /asset/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:56 +0700] "GET /asset/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:40:58 +0700] "GET /assetadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:03 +0700] "GET /assetalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:05 +0700] "GET /assetbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:07 +0700] "GET /assetk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:10 +0700] "GET /assets/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:12 +0700] "GET /assets/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:15 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:18 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:20 +0700] "GET /assets/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:23 +0700] "GET /assets/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:25 +0700] "GET /assetsadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:27 +0700] "GET /assetsalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:29 +0700] "GET /assetsbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:32 +0700] "GET /assetsk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:34 +0700] "GET /assetswp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:36 +0700] "GET /assetwp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:39 +0700] "GET /asu.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:41 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:44 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:47 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:50 +0700] "GET /ayk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:53 +0700] "GET /azdare.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:55 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:41:58 +0700] "GET /b374k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:00 +0700] "GET /back.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:05 +0700] "GET /baindex.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:08 +0700] "GET /base.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:10 +0700] "GET /batm.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:13 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:15 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:17 +0700] "GET /beence.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:20 +0700] "GET /bin/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:22 +0700] "GET /bin/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:25 +0700] "GET /bin/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:27 +0700] "GET /bin/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:29 +0700] "GET /bin/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:32 +0700] "GET /bin/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:34 +0700] "GET /binadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:37 +0700] "GET /binalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:39 +0700] "GET /binbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:42 +0700] "GET /bink.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:44 +0700] "GET /binwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:46 +0700] "GET /bitwise.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:48 +0700] "GET /bj.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:51 +0700] "GET /bkv74.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:53 +0700] "GET /black.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:56 +0700] "GET /blacksec.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:42:58 +0700] "GET /block-patwp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:01 +0700] "GET /block.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:04 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:08 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:10 +0700] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:13 +0700] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:15 +0700] "GET /blue.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:18 +0700] "GET /blvck.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:20 +0700] "GET /bootstrap/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:23 +0700] "GET /bootstrap/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:25 +0700] "GET /bootstrap/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:28 +0700] "GET /bootstrap/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:30 +0700] "GET /bootstrap/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:33 +0700] "GET /bootstrap/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:35 +0700] "GET /bootstrapadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:38 +0700] "GET /bootstrapalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:40 +0700] "GET /bootstrapbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:42 +0700] "GET /bootstrapk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:44 +0700] "GET /bootstrapwp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:47 +0700] "GET /bowo.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:48 +0700] "GET /bowotod.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:51 +0700] "GET /bps.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:53 +0700] "GET /bre.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:55 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:57 +0700] "GET /bs.php7 HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:43:59 +0700] "GET /by.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:01 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:06 +0700] "GET /bypas.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:08 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:11 +0700] "GET /bypass403.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:13 +0700] "GET /bypass404.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:15 +0700] "GET /byps.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:17 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:20 +0700] "GET /c0derz_shell.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:23 +0700] "GET /c99.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:25 +0700] "GET /c999shell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:26 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:29 +0700] "GET /cache/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:32 +0700] "GET /cache/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:34 +0700] "GET /cache/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:37 +0700] "GET /cache/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:39 +0700] "GET /cache/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:42 +0700] "GET /cache/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:44 +0700] "GET /cacheadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:46 +0700] "GET /cachealfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:49 +0700] "GET /cachebypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:51 +0700] "GET /cachek.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:54 +0700] "GET /caches.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:56 +0700] "GET /cachewp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:44:58 +0700] "GET /catalog/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:01 +0700] "GET /catalog/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:04 +0700] "GET /catalog/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:06 +0700] "GET /catalog/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:10 +0700] "GET /catalog/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:13 +0700] "GET /catalog/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:15 +0700] "GET /catalogadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:18 +0700] "GET /catalogalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:21 +0700] "GET /catalogbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:23 +0700] "GET /catalogk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:25 +0700] "GET /catalogwp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:28 +0700] "GET /ccaef.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:30 +0700] "GET /cd.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:33 +0700] "GET /cgi-bin/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:34 +0700] "GET /cgi-bin/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:39 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:41 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:44 +0700] "GET /cgi-bin/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:46 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:48 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:52 +0700] "GET /cgi-bin/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:54 +0700] "GET /cgi-binadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:56 +0700] "GET /cgi-binalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:45:58 +0700] "GET /cgi-binbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:01 +0700] "GET /cgi-bink.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:04 +0700] "GET /cgi-binwp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:06 +0700] "GET /cgi.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:10 +0700] "GET /cgialfa/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:13 +0700] "GET /cgialfa/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:15 +0700] "GET /cgialfa/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:16 +0700] "GET /cgialfa/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:19 +0700] "GET /cgialfa/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:23 +0700] "GET /cgialfa/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:25 +0700] "GET /cgialfaadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:27 +0700] "GET /cgialfaalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:29 +0700] "GET /cgialfabypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:32 +0700] "GET /cgialfak.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:34 +0700] "GET /cgialfawp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:37 +0700] "GET /checkbox.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:40 +0700] "GET /chitoge.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:42 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:44 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:46 +0700] "GET /ciis.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:48 +0700] "GET /clan.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:51 +0700] "GET /class-ftp-pures.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:56 +0700] "GET /class-wp-settings.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:46:58 +0700] "GET /class-wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:00 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:04 +0700] "GET /class_appfun.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:06 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:09 +0700] "GET /clay.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:11 +0700] "GET /clen.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:13 +0700] "GET /click.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:15 +0700] "GET /cmd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:17 +0700] "GET /cms.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:19 +0700] "GET /cocot.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:22 +0700] "GET /codeboy1877x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:24 +0700] "GET /cok.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:27 +0700] "GET /common/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:29 +0700] "GET /common/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:31 +0700] "GET /common/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:33 +0700] "GET /common/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:35 +0700] "GET /common/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:40 +0700] "GET /common/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:43 +0700] "GET /commonadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:45 +0700] "GET /commonalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:47 +0700] "GET /commonbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:49 +0700] "GET /commonk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:52 +0700] "GET /commonwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:54 +0700] "GET /components/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:56 +0700] "GET /components/alfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:47:58 +0700] "GET /components/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:00 +0700] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:03 +0700] "GET /components/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:05 +0700] "GET /components/k.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:07 +0700] "GET /components/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:09 +0700] "GET /componentsadmin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:12 +0700] "GET /componentsalfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:14 +0700] "GET /componentsbypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:15 +0700] "GET /componentsk.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:17 +0700] "GET /componentswp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:19 +0700] "GET /con.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:22 +0700] "GET /con7.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:24 +0700] "GET /con7ext.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:25 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:27 +0700] "GET /config/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:29 +0700] "GET /config/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:32 +0700] "GET /config/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
34.14.71.24 - - [02/Sep/2025:02:48:33 +0700] "GET /robots.txt HTTP/1.1" 301 1057 "-" "DnBCrawler-Analytics"
34.14.71.24 - - [02/Sep/2025:02:48:34 +0700] "GET / HTTP/1.1" 301 1047 "-" "DnBCrawler-Analytics"
178.128.16.200 - - [02/Sep/2025:02:48:34 +0700] "GET /config/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
34.14.71.24 - - [02/Sep/2025:02:48:35 +0700] "GET /robots.txt HTTP/1.1" 301 1061 "-" "DnBCrawler-Analytics"
178.128.16.200 - - [02/Sep/2025:02:48:35 +0700] "GET /config/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
34.14.71.24 - - [02/Sep/2025:02:48:35 +0700] "GET / HTTP/1.1" 301 1051 "-" "DnBCrawler-Analytics"
178.128.16.200 - - [02/Sep/2025:02:48:37 +0700] "GET /config/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:39 +0700] "GET /configadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:42 +0700] "GET /configalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:44 +0700] "GET /configbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:46 +0700] "GET /configk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:48 +0700] "GET /configwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:50 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:52 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:54 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:57 +0700] "GET /content/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:48:59 +0700] "GET /contentadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:02 +0700] "GET /contentalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:05 +0700] "GET /contentbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:07 +0700] "GET /contentk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:09 +0700] "GET /contentwp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:12 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:15 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:17 +0700] "GET /core/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:21 +0700] "GET /core/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:23 +0700] "GET /core/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:25 +0700] "GET /core/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:27 +0700] "GET /core/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:30 +0700] "GET /core/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:32 +0700] "GET /coreadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:35 +0700] "GET /corealfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:37 +0700] "GET /corebypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:39 +0700] "GET /corek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:41 +0700] "GET /corewp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:43 +0700] "GET /costome/fhhgjg.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:46 +0700] "GET /cot.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:48 +0700] "GET /cp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:50 +0700] "GET /cpanel.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:52 +0700] "GET /creates.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:54 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:56 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:49:59 +0700] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:04 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:07 +0700] "GET /css/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:09 +0700] "GET /css/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:12 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:14 +0700] "GET /css/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:17 +0700] "GET /css/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:20 +0700] "GET /curme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:22 +0700] "GET /cy.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:24 +0700] "GET /cybershell.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:27 +0700] "GET /cyl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:29 +0700] "GET /cylul.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:32 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:34 +0700] "GET /d65ve.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:37 +0700] "GET /danci.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:39 +0700] "GET /darkshell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:43 +0700] "GET /dashboard/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:45 +0700] "GET /dashboard/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:47 +0700] "GET /dashboard/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:51 +0700] "GET /dashboard/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:53 +0700] "GET /dashboard/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:50:57 +0700] "GET /dashboard/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:02 +0700] "GET /dashboardadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:04 +0700] "GET /dashboardalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:07 +0700] "GET /dashboardbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:09 +0700] "GET /dashboardk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:13 +0700] "GET /dashboardwp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:16 +0700] "GET /data-user.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:18 +0700] "GET /data.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:20 +0700] "GET /database.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:23 +0700] "GET /date.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:25 +0700] "GET /dav.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:28 +0700] "GET /db-config.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:30 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:33 +0700] "GET /db.php?u HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:35 +0700] "GET /dbx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:37 +0700] "GET /defau1t.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:39 +0700] "GET /defaul.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:42 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:44 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:47 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:49 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:52 +0700] "GET /degesaciihaxor.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:54 +0700] "GET /degeselih.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:56 +0700] "GET /demo328/fw.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:51:58 +0700] "GET /demon.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:01 +0700] "GET /demos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:03 +0700] "GET /descargas.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:05 +0700] "GET /dev.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:07 +0700] "GET /devil.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:10 +0700] "GET /dist/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:13 +0700] "GET /dist/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:16 +0700] "GET /dist/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:18 +0700] "GET /dist/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:20 +0700] "GET /dist/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:24 +0700] "GET /dist/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:26 +0700] "GET /distadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:29 +0700] "GET /distalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:31 +0700] "GET /distbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:34 +0700] "GET /distk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:36 +0700] "GET /distwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:38 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:41 +0700] "GET /doc/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:43 +0700] "GET /doc/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:45 +0700] "GET /doc/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:48 +0700] "GET /doc/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:50 +0700] "GET /doc/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:54 +0700] "GET /doc/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:57 +0700] "GET /doc/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:52:59 +0700] "GET /docadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:01 +0700] "GET /docalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:04 +0700] "GET /docbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:07 +0700] "GET /docindex.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:10 +0700] "GET /dock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:12 +0700] "GET /docs/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:15 +0700] "GET /docs/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:17 +0700] "GET /docs/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:19 +0700] "GET /docs/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:22 +0700] "GET /docs/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:25 +0700] "GET /docs/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:27 +0700] "GET /docsadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:30 +0700] "GET /docsalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:32 +0700] "GET /docsbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:35 +0700] "GET /docsk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:37 +0700] "GET /docswp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:39 +0700] "GET /documents/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:42 +0700] "GET /documents/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:45 +0700] "GET /documents/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:47 +0700] "GET /documents/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:50 +0700] "GET /documents/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:52 +0700] "GET /documents/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:54 +0700] "GET /documentsadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:53:57 +0700] "GET /documentsalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:01 +0700] "GET /documentsbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:04 +0700] "GET /documentsk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:06 +0700] "GET /documentswp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:08 +0700] "GET /docwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:11 +0700] "GET /dokumen/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:13 +0700] "GET /dokumen/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:15 +0700] "GET /dokumen/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:18 +0700] "GET /dokumen/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:20 +0700] "GET /dokumen/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:22 +0700] "GET /dokumen/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:25 +0700] "GET /dokumenadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:27 +0700] "GET /dokumenalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:29 +0700] "GET /dokumenbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:31 +0700] "GET /dokumenk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:33 +0700] "GET /dokumenwp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:35 +0700] "GET /domain.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:37 +0700] "GET /dosya.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:40 +0700] "GET /dr.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:42 +0700] "GET /dragonforce.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:44 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:47 +0700] "GET /dxshell.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:49 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:52 +0700] "GET /eagle.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:54 +0700] "GET /edit-form.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:56 +0700] "GET /en.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:54:59 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:01 +0700] "GET /error.php?phpshells HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:05 +0700] "GET /evil.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:07 +0700] "GET /eviltwin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:10 +0700] "GET /ex0shell.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:13 +0700] "GET /exp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:16 +0700] "GET /export.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:18 +0700] "GET /ey.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:21 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:23 +0700] "GET /f0x.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:27 +0700] "GET /f1zr.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:29 +0700] "GET /fast.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:31 +0700] "GET /fatal.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:34 +0700] "GET /fdgfdgdsfd.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:36 +0700] "GET /feed.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:39 +0700] "GET /ffAA531.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:42 +0700] "GET /fierza.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:44 +0700] "GET /file-manager.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:48 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:50 +0700] "GET /file/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:54 +0700] "GET /file/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:56 +0700] "GET /file/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:55:59 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:03 +0700] "GET /file/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:06 +0700] "GET /file/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:08 +0700] "GET /file/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:11 +0700] "GET /file_upload/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:14 +0700] "GET /file_upload/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:16 +0700] "GET /file_upload/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:19 +0700] "GET /file_upload/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:21 +0700] "GET /file_upload/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:23 +0700] "GET /file_upload/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:26 +0700] "GET /file_uploadadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:28 +0700] "GET /file_uploadalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:30 +0700] "GET /file_uploadbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:33 +0700] "GET /file_uploadk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:35 +0700] "GET /file_uploads/admin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:38 +0700] "GET /file_uploads/alfa.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:40 +0700] "GET /file_uploads/bypass.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:43 +0700] "GET /file_uploads/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:45 +0700] "GET /file_uploads/k.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:47 +0700] "GET /file_uploads/wp.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:49 +0700] "GET /file_uploadsadmin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:52 +0700] "GET /file_uploadsalfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:54 +0700] "GET /file_uploadsbypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:57 +0700] "GET /file_uploadsk.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:56:59 +0700] "GET /file_uploadswp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:01 +0700] "GET /file_uploadwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:05 +0700] "GET /fileadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:07 +0700] "GET /filealfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:09 +0700] "GET /filebypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:12 +0700] "GET /filedokumen/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:14 +0700] "GET /filedokumen/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:17 +0700] "GET /filedokumen/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:19 +0700] "GET /filedokumen/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:24 +0700] "GET /filedokumen/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:26 +0700] "GET /filedokumen/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:28 +0700] "GET /filedokumenadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:31 +0700] "GET /filedokumenalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:34 +0700] "GET /filedokumenbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:36 +0700] "GET /filedokumenk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:39 +0700] "GET /filedokumenwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:41 +0700] "GET /filek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:43 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:46 +0700] "GET /filemanager/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:48 +0700] "GET /filemanager/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:50 +0700] "GET /filemanager/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:52 +0700] "GET /filemanager/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:54 +0700] "GET /filemanager/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:56 +0700] "GET /filemanager/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:57:59 +0700] "GET /filemanageradmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:02 +0700] "GET /filemanageralfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:05 +0700] "GET /filemanagerbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:08 +0700] "GET /filemanagerk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:11 +0700] "GET /filemanagerwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:13 +0700] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:16 +0700] "GET /files/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:18 +0700] "GET /files/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:21 +0700] "GET /files/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:24 +0700] "GET /files/home.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:26 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:29 +0700] "GET /files/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:31 +0700] "GET /files/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:34 +0700] "GET /filesadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:37 +0700] "GET /filesalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:39 +0700] "GET /filesbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:41 +0700] "GET /filesk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:43 +0700] "GET /fileswp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:45 +0700] "GET /filewp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:48 +0700] "GET /findes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:50 +0700] "GET /flame.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:52 +0700] "GET /fm1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:54 +0700] "GET /font.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:58:57 +0700] "GET /font/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:00 +0700] "GET /font/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:03 +0700] "GET /font/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:05 +0700] "GET /font/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:09 +0700] "GET /font/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:11 +0700] "GET /font/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:14 +0700] "GET /fontadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:16 +0700] "GET /fontalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:19 +0700] "GET /fontbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:22 +0700] "GET /fontk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:25 +0700] "GET /fontwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:28 +0700] "GET /forbiden.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:30 +0700] "GET /forums.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:32 +0700] "GET /forums.tpl-1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:34 +0700] "GET /foto/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:37 +0700] "GET /foto/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:39 +0700] "GET /foto/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:41 +0700] "GET /foto/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:43 +0700] "GET /foto/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:46 +0700] "GET /foto/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:48 +0700] "GET /fotoadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:53 +0700] "GET /fotoalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:55 +0700] "GET /fotobypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:57 +0700] "GET /fotok.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:02:59:59 +0700] "GET /fotowp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:03 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:05 +0700] "GET /fox1.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:07 +0700] "GET /foxwso.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:09 +0700] "GET /foxwsov1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:12 +0700] "GET /foxwsov2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:16 +0700] "GET /foxx.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:18 +0700] "GET /fpebr.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:22 +0700] "GET /fr.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:25 +0700] "GET /fse.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:30 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:33 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:36 +0700] "GET /fx-mini.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:38 +0700] "GET /fx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:41 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:43 +0700] "GET /g3l4y.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:46 +0700] "GET /gac.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:49 +0700] "GET /galekjaya.php?raimu=tgl99 HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:51 +0700] "GET /gambar/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:54 +0700] "GET /gambar/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:56 +0700] "GET /gambar/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:00:59 +0700] "GET /gambar/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:02 +0700] "GET /gambar/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:06 +0700] "GET /gambar/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:08 +0700] "GET /gambaradmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:11 +0700] "GET /gambaralfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:13 +0700] "GET /gambarbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:16 +0700] "GET /gambark.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:18 +0700] "GET /gambarwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:21 +0700] "GET /gank.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:23 +0700] "GET /gank.php.PhP HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:26 +0700] "GET /gec212.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:30 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:33 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:35 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:37 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:39 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:42 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:44 +0700] "GET /gh.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:47 +0700] "GET /ghostsec.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:50 +0700] "GET /gif.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:53 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:56 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:01:58 +0700] "GET /goat1.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:01 +0700] "GET /god4m.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:05 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:07 +0700] "GET /gray.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:09 +0700] "GET /green.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:13 +0700] "GET /groupon.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:15 +0700] "GET /gvy6f.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:17 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:20 +0700] "GET /haduh.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:23 +0700] "GET /harga.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:26 +0700] "GET /hax.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:28 +0700] "GET /haxor.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:30 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:32 +0700] "GET /hehehehe.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:35 +0700] "GET /hello.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:37 +0700] "GET /help.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:40 +0700] "GET /hexor.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:42 +0700] "GET /hhh.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:44 +0700] "GET /hi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:47 +0700] "GET /home/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:49 +0700] "GET /home/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:51 +0700] "GET /home/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:53 +0700] "GET /home/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:56 +0700] "GET /home/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:02:58 +0700] "GET /home/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:01 +0700] "GET /homeadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:03 +0700] "GET /homealfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:07 +0700] "GET /homebypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:09 +0700] "GET /homek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:11 +0700] "GET /homewp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:13 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:15 +0700] "GET /hunter.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:18 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:20 +0700] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:24 +0700] "GET /ice.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:27 +0700] "GET /id.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:29 +0700] "GET /idk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:31 +0700] "GET /ids.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:34 +0700] "GET /idx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:36 +0700] "GET /if.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:38 +0700] "GET /ikeh.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:41 +0700] "GET /ilusi.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:44 +0700] "GET /image/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:46 +0700] "GET /image/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:48 +0700] "GET /image/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:51 +0700] "GET /image/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:53 +0700] "GET /image/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:55 +0700] "GET /image/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:03:58 +0700] "GET /imageadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:00 +0700] "GET /imagealfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:03 +0700] "GET /imagebypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:06 +0700] "GET /imagek.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:09 +0700] "GET /images.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:11 +0700] "GET /images//admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:14 +0700] "GET /images//alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:16 +0700] "GET /images//bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:18 +0700] "GET /images//index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:20 +0700] "GET /images//k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:23 +0700] "GET /images//wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:26 +0700] "GET /images/1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:28 +0700] "GET /images/404.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:31 +0700] "GET /images/4pride.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:33 +0700] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:36 +0700] "GET /images/a.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:38 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:41 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:43 +0700] "GET /images/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:45 +0700] "GET /images/alfashell.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:47 +0700] "GET /images/am.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:49 +0700] "GET /images/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:52 +0700] "GET /images/byps.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:55 +0700] "GET /images/c99.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:57 +0700] "GET /images/daes.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:04:59 +0700] "GET /images/fox.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:01 +0700] "GET /images/fw.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:04 +0700] "GET /images/gelay.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:07 +0700] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:09 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:11 +0700] "GET /images/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:14 +0700] "GET /images/leaf.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:16 +0700] "GET /images/leafmailer.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:19 +0700] "GET /images/leafmailer2.8.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:21 +0700] "GET /images/lux.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:23 +0700] "GET /images/mar.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:25 +0700] "GET /images/mari.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:28 +0700] "GET /images/maro.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:30 +0700] "GET /images/mini.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:33 +0700] "GET /images/priv8.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:35 +0700] "GET /images/shell.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:38 +0700] "GET /images/sym.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:40 +0700] "GET /images/sym403.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:45 +0700] "GET /images/up.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:47 +0700] "GET /images/upl.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:49 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:51 +0700] "GET /images/uploader.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:54 +0700] "GET /images/vuln.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:56 +0700] "GET /images/wp-init.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:05:58 +0700] "GET /images/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:01 +0700] "GET /images/wso.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:04 +0700] "GET /images/x.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:07 +0700] "GET /imagesadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:09 +0700] "GET /imagesalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:12 +0700] "GET /imagesbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:14 +0700] "GET /imagesk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:17 +0700] "GET /imagesvuln.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:19 +0700] "GET /imageswp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:21 +0700] "GET /imagewp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:24 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:26 +0700] "GET /includes.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:28 +0700] "GET /includes/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:31 +0700] "GET /includes/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:33 +0700] "GET /includes/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:36 +0700] "GET /includes/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:39 +0700] "GET /includes/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:41 +0700] "GET /includes/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:43 +0700] "GET /includesadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:46 +0700] "GET /includesalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:48 +0700] "GET /includesbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:50 +0700] "GET /includesk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:53 +0700] "GET /includeswp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:56 +0700] "GET /indeex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:06:59 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:02 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:04 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:06 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:08 +0700] "GET /index3.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:11 +0700] "GET /index4.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:13 +0700] "GET /index404.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:15 +0700] "GET /index5.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:17 +0700] "GET /index6.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:19 +0700] "GET /index7.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:22 +0700] "GET /index8.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:24 +0700] "GET /index9.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:26 +0700] "GET /indexof.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:28 +0700] "GET /indexx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:31 +0700] "GET /indosec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:34 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:36 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:38 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:40 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:43 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:45 +0700] "GET /ioxi.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:47 +0700] "GET /ipt.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:49 +0700] "GET /iq.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:51 +0700] "GET /iqb.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:54 +0700] "GET /it.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:56 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:07:58 +0700] "GET /jadow.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:01 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:04 +0700] "GET /joomla/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:07 +0700] "GET /joomla/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:09 +0700] "GET /joomla/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:12 +0700] "GET /joomla/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:15 +0700] "GET /joomla/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:17 +0700] "GET /joomla/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:19 +0700] "GET /joomlaadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:22 +0700] "GET /joomlaalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:24 +0700] "GET /joomlabypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:26 +0700] "GET /joomlak.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:28 +0700] "GET /joomlawp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:30 +0700] "GET /joy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:33 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:36 +0700] "GET /js.php?get HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:38 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:41 +0700] "GET /k7.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:44 +0700] "GET /kanghoax.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:46 +0700] "GET /kcfinder/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:49 +0700] "GET /kcfinder/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:51 +0700] "GET /kcfinder/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:53 +0700] "GET /kcfinder/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:56 +0700] "GET /kcfinder/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:08:58 +0700] "GET /kcfinder/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:01 +0700] "GET /kcfinderadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:03 +0700] "GET /kcfinderalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:07 +0700] "GET /kcfinderbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:09 +0700] "GET /kcfinderk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:12 +0700] "GET /kcfinderwp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:14 +0700] "GET /kct.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:17 +0700] "GET /kct403.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:19 +0700] "GET /kepo.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:22 +0700] "GET /kii.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:24 +0700] "GET /kil.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:27 +0700] "GET /killbot.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:29 +0700] "GET /kindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:32 +0700] "GET /kiss.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:34 +0700] "GET /kk.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:36 +0700] "GET /kn.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:38 +0700] "GET /kndw1.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:40 +0700] "GET /kon.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:43 +0700] "GET /kontol.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:45 +0700] "GET /kontoru.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:47 +0700] "GET /kses.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:49 +0700] "GET /kuda.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:52 +0700] "GET /kyami.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:54 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:57 +0700] "GET /l10n.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:09:59 +0700] "GET /l28.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:01 +0700] "GET /la.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:07 +0700] "GET /lab.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:12 +0700] "GET /langar.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:15 +0700] "GET /laymu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:18 +0700] "GET /layouts/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:20 +0700] "GET /layouts/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:22 +0700] "GET /layouts/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:25 +0700] "GET /layouts/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:27 +0700] "GET /layouts/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:29 +0700] "GET /layouts/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:31 +0700] "GET /layoutsadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:33 +0700] "GET /layoutsalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:36 +0700] "GET /layoutsbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:38 +0700] "GET /layoutsk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:42 +0700] "GET /layoutswp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:44 +0700] "GET /leaf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:47 +0700] "GET /leaf_mailer.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:49 +0700] "GET /leaf_php.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:52 +0700] "GET /leafmailer.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:54 +0700] "GET /leafmailer2.8.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:10:57 +0700] "GET /legal.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:00 +0700] "GET /legion.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:03 +0700] "GET /lf.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:06 +0700] "GET /lib/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:08 +0700] "GET /lib/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:11 +0700] "GET /lib/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:13 +0700] "GET /lib/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:15 +0700] "GET /lib/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:17 +0700] "GET /lib/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:20 +0700] "GET /libadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:23 +0700] "GET /libalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:25 +0700] "GET /libbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:28 +0700] "GET /libk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:30 +0700] "GET /libraries/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:32 +0700] "GET /libraries/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:35 +0700] "GET /libraries/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:37 +0700] "GET /libraries/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:39 +0700] "GET /libraries/joomla/css.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:42 +0700] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:44 +0700] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:46 +0700] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:49 +0700] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:51 +0700] "GET /libraries/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:53 +0700] "GET /libraries/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:55 +0700] "GET /librariesadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:11:58 +0700] "GET /librariesalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:01 +0700] "GET /librariesbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:05 +0700] "GET /librariesk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:07 +0700] "GET /librarieswp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:10 +0700] "GET /library.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:12 +0700] "GET /libwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:14 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:17 +0700] "GET /licenses.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:19 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:21 +0700] "GET /lnedx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:24 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:26 +0700] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:28 +0700] "GET /local.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:32 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:34 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:37 +0700] "GET /lock360.php?daksldlkdsadas=1 HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:39 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:41 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:43 +0700] "GET /login.phtml HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:45 +0700] "GET /logoUTP8.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:48 +0700] "GET /lol.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:50 +0700] "GET /lolzk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:53 +0700] "GET /lowpr.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:55 +0700] "GET /lufix.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:12:57 +0700] "GET /luuf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:00 +0700] "GET /luuuf.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:05 +0700] "GET /lux.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:07 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:10 +0700] "GET /lx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:12 +0700] "GET /lyda.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:15 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:17 +0700] "GET /m4m4nkmud4.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:20 +0700] "GET /m4r1ju4n4.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:22 +0700] "GET /macibay.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:24 +0700] "GET /madmailer.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:27 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:29 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:31 +0700] "GET /mailer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:34 +0700] "GET /mailer1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:35 +0700] "GET /mailer3.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:38 +0700] "GET /main.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:40 +0700] "GET /main_file/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:43 +0700] "GET /main_file/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:45 +0700] "GET /main_file/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:47 +0700] "GET /main_file/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:49 +0700] "GET /main_file/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:52 +0700] "GET /main_file/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:54 +0700] "GET /main_fileadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:56 +0700] "GET /main_filealfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:13:58 +0700] "GET /main_filebypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:01 +0700] "GET /main_filek.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:05 +0700] "GET /main_filewp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:07 +0700] "GET /maites.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:10 +0700] "GET /makesmtp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:12 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:15 +0700] "GET /mano.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:19 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:21 +0700] "GET /mari.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:24 +0700] "GET /marijuana.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:26 +0700] "GET /maro.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:28 +0700] "GET /mas.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:31 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:32 +0700] "GET /matamu.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:34 +0700] "GET /mbt.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:37 +0700] "GET /mcc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:39 +0700] "GET /mclash.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:41 +0700] "GET /media-admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:44 +0700] "GET /media/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:46 +0700] "GET /media/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:48 +0700] "GET /media/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:50 +0700] "GET /media/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:54 +0700] "GET /media/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:55 +0700] "GET /media/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:14:58 +0700] "GET /mediaadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:00 +0700] "GET /mediaalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:04 +0700] "GET /mediabypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:06 +0700] "GET /mediak.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:09 +0700] "GET /mediawp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:11 +0700] "GET /mega.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:14 +0700] "GET /meki.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:16 +0700] "GET /memek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:19 +0700] "GET /message.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:21 +0700] "GET /mi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:24 +0700] "GET /min.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:26 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:29 +0700] "GET /minik.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:31 +0700] "GET /minimo.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:34 +0700] "GET /minipriv.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:36 +0700] "GET /minishell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:39 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:41 +0700] "GET /module.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:44 +0700] "GET /modules/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:47 +0700] "GET /modules/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:50 +0700] "GET /modules/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:53 +0700] "GET /modules/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:55 +0700] "GET /modules/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:15:57 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:00 +0700] "GET /modules/modules/modules.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:02 +0700] "GET /modules/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:07 +0700] "GET /modulesadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:10 +0700] "GET /modulesalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:12 +0700] "GET /modulesbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:15 +0700] "GET /modulesk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:17 +0700] "GET /moduless.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:20 +0700] "GET /moduleswp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:22 +0700] "GET /mokad.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:25 +0700] "GET /monaloku.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:27 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:30 +0700] "GET /mrjn.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:32 +0700] "GET /ms-site.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:36 +0700] "GET /ms.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:38 +0700] "GET /mwmek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:40 +0700] "GET /n.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:43 +0700] "GET /name.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:45 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:47 +0700] "GET /nee.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:51 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:53 +0700] "GET /new-index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:56 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:16:58 +0700] "GET /new_license.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:01 +0700] "GET /ngtd.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:06 +0700] "GET /ninja.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:08 +0700] "GET /nshell.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:11 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:13 +0700] "GET /obfbyte.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:15 +0700] "GET /ohayo.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:18 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:20 +0700] "GET /old-index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:22 +0700] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:26 +0700] "GET /old/images/Summer2010/-/gif.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:28 +0700] "GET /olu.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:30 +0700] "GET /olux.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:32 +0700] "GET /omest.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:35 +0700] "GET /omest403.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:38 +0700] "GET /on-settingssl.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:40 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:42 +0700] "GET /orange.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:45 +0700] "GET /ovshell.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:47 +0700] "GET /owl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:49 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:52 +0700] "GET /p0wny-shell.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:54 +0700] "GET /pHpINJ.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:56 +0700] "GET /packed.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:17:58 +0700] "GET /pages/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:01 +0700] "GET /pages/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:04 +0700] "GET /pages/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:07 +0700] "GET /pages/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:09 +0700] "GET /pages/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:12 +0700] "GET /pages/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:15 +0700] "GET /pagesadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:17 +0700] "GET /pagesalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:19 +0700] "GET /pagesbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:21 +0700] "GET /pagesk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:24 +0700] "GET /pageswp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:26 +0700] "GET /pda.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:28 +0700] "GET /php-backdoor.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:30 +0700] "GET /php/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:32 +0700] "GET /php/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:34 +0700] "GET /php/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:36 +0700] "GET /php/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:39 +0700] "GET /php/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:42 +0700] "GET /php/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:44 +0700] "GET /phpadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:47 +0700] "GET /phpalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:50 +0700] "GET /phpbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:52 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:54 +0700] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:56 +0700] "GET /phpk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:18:59 +0700] "GET /phpwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:01 +0700] "GET /pi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:05 +0700] "GET /pirja.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:08 +0700] "GET /pler.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:10 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:13 +0700] "GET /plugins/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:15 +0700] "GET /plugins/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:17 +0700] "GET /plugins/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:19 +0700] "GET /plugins/function.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:23 +0700] "GET /plugins/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:25 +0700] "GET /plugins/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:27 +0700] "GET /plugins/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:30 +0700] "GET /pluginsadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:32 +0700] "GET /pluginsalfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:35 +0700] "GET /pluginsbypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:38 +0700] "GET /pluginsk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:40 +0700] "GET /pluginswp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:42 +0700] "GET /pop.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:45 +0700] "GET /postfs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:47 +0700] "GET /predator.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:49 +0700] "GET /pref.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:53 +0700] "GET /priv.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:55 +0700] "GET /priv01.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:57 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:19:59 +0700] "GET /product.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:04 +0700] "GET /profile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:07 +0700] "GET /profiles/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:09 +0700] "GET /profiles/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:11 +0700] "GET /profiles/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:14 +0700] "GET /profiles/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:16 +0700] "GET /profiles/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:20 +0700] "GET /profiles/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:22 +0700] "GET /profilesadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:26 +0700] "GET /profilesalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:28 +0700] "GET /profilesbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:31 +0700] "GET /profilesk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:34 +0700] "GET /profileswp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:37 +0700] "GET /psFile-2016-12-17104245.png HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:39 +0700] "GET /public/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:43 +0700] "GET /public/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:46 +0700] "GET /public/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:49 +0700] "GET /public/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:52 +0700] "GET /public/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:55 +0700] "GET /public/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:57 +0700] "GET /publicadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:20:59 +0700] "GET /publicalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:03 +0700] "GET /publicbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:07 +0700] "GET /publick.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:12 +0700] "GET /publicwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:14 +0700] "GET /puki.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:16 +0700] "GET /q.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:18 +0700] "GET /qindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:21 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:24 +0700] "GET /r00t.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:27 +0700] "GET /r57.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:29 +0700] "GET /r57shell.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:31 +0700] "GET /racing.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:35 +0700] "GET /rad.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:37 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:40 +0700] "GET /radio.php?pass=shell HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:42 +0700] "GET /rafa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:44 +0700] "GET /rahma.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:46 +0700] "GET /raw.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:48 +0700] "GET /read.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:51 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:54 +0700] "GET /red.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:56 +0700] "GET /register/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:21:59 +0700] "GET /register/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:01 +0700] "GET /register/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:07 +0700] "GET /register/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:10 +0700] "GET /register/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:13 +0700] "GET /register/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:15 +0700] "GET /registeradmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:18 +0700] "GET /registeralfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:19 +0700] "GET /registerbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:22 +0700] "GET /registerk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:24 +0700] "GET /registerwp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:26 +0700] "GET /remove.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:27 +0700] "GET /rename.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:29 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:31 +0700] "GET /resources/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:35 +0700] "GET /resources/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:38 +0700] "GET /resources/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:40 +0700] "GET /resources/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:42 +0700] "GET /resources/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:44 +0700] "GET /resources/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:47 +0700] "GET /resourcesadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:49 +0700] "GET /resourcesalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:52 +0700] "GET /resourcesbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:54 +0700] "GET /resourcesk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:56 +0700] "GET /resourceswp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:22:58 +0700] "GET /revisi.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:01 +0700] "GET /rex.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:03 +0700] "GET /rexx.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:06 +0700] "GET /ri.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:08 +0700] "GET /robot.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:11 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:14 +0700] "GET /room.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:16 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:19 +0700] "GET /rootshell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:21 +0700] "GET /routes/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:24 +0700] "GET /routes/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:27 +0700] "GET /routes/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:30 +0700] "GET /routes/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:33 +0700] "GET /routes/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:35 +0700] "GET /routes/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:38 +0700] "GET /routesadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:41 +0700] "GET /routesalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:43 +0700] "GET /routesbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:46 +0700] "GET /routesk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:49 +0700] "GET /routeswp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:51 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:53 +0700] "GET /rsyev.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:55 +0700] "GET /russian.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:23:58 +0700] "GET /rx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:00 +0700] "GET /rxr.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:06 +0700] "GET /rxr.php?rxr HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:09 +0700] "GET /rzx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:11 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:14 +0700] "GET /s_e.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:17 +0700] "GET /s_ne.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:19 +0700] "GET /sad/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:22 +0700] "GET /sam.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:23 +0700] "GET /sambernyawa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:26 +0700] "GET /sample-config-options.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:29 +0700] "GET /sang3.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:31 +0700] "GET /scn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:35 +0700] "GET /sct.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:37 +0700] "GET /search.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:39 +0700] "GET /security.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:41 +0700] "GET /send.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:44 +0700] "GET /sendmail.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:46 +0700] "GET /server.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:48 +0700] "GET /settings/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:51 +0700] "GET /settings/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:54 +0700] "GET /settings/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:56 +0700] "GET /settings/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:24:58 +0700] "GET /settings/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:01 +0700] "GET /settings/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:05 +0700] "GET /settingsadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:08 +0700] "GET /settingsalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:10 +0700] "GET /settingsbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:13 +0700] "GET /settingsk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:15 +0700] "GET /settingswp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:17 +0700] "GET /setup-config.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:19 +0700] "GET /sh.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:22 +0700] "GET /sh3ll.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:24 +0700] "GET /shadowx.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:26 +0700] "GET /shankar.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:29 +0700] "GET /shell.aspx HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:30 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:33 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:36 +0700] "GET /shell4.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:39 +0700] "GET /shell_lock.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:41 +0700] "GET /shellbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:44 +0700] "GET /shells.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:46 +0700] "GET /shellsiapa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:50 +0700] "GET /shellx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:52 +0700] "GET /shelss.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:54 +0700] "GET /shl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:25:56 +0700] "GET /shv3n0m.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:00 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:03 +0700] "GET /siapa.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:06 +0700] "GET /simattacker.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:09 +0700] "GET /simple-shell.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:12 +0700] "GET /simple-upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:14 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:17 +0700] "GET /simple_backdoor.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:20 +0700] "GET /simple_cmd.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:23 +0700] "GET /simple_php_backdoor_by_dk.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:26 +0700] "GET /sincap.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:28 +0700] "GET /sindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:31 +0700] "GET /sites/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:34 +0700] "GET /sites/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:36 +0700] "GET /sites/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:38 +0700] "GET /sites/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:41 +0700] "GET /sites/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:44 +0700] "GET /sites/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:46 +0700] "GET /sitesadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:48 +0700] "GET /sitesalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:50 +0700] "GET /sitesbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:53 +0700] "GET /sitesk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:55 +0700] "GET /siteswp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:26:57 +0700] "GET /skipper.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:00 +0700] "GET /skippershell.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:02 +0700] "GET /slider/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:06 +0700] "GET /slider/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:08 +0700] "GET /slider/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:11 +0700] "GET /slider/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:14 +0700] "GET /slider/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:17 +0700] "GET /slider/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:19 +0700] "GET /slideradmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:23 +0700] "GET /slideralfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:26 +0700] "GET /sliderbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:28 +0700] "GET /sliderk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:30 +0700] "GET /sliderwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:34 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:48 +0700] "GET /snd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:50 +0700] "GET /snd21.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:54 +0700] "GET /spawn.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:56 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:27:59 +0700] "GET /sql.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:03 +0700] "GET /srx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:06 +0700] "GET /stats.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:08 +0700] "GET /stfu.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:11 +0700] "GET /stindex.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:14 +0700] "GET /storage/admin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:17 +0700] "GET /storage/alfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:21 +0700] "GET /storage/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:23 +0700] "GET /storage/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:26 +0700] "GET /storage/k.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:29 +0700] "GET /storage/wp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:30 +0700] "GET /storageadmin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:33 +0700] "GET /storagealfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:36 +0700] "GET /storagebypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:38 +0700] "GET /storagek.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:40 +0700] "GET /storagewp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:42 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:45 +0700] "GET /style-js.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:47 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:49 +0700] "GET /stylec.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:52 +0700] "GET /su.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:54 +0700] "GET /sub.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:57 +0700] "GET /sunda.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:28:59 +0700] "GET /sundaxploit.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:05 +0700] "GET /sure.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:07 +0700] "GET /swm.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:09 +0700] "GET /sx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:12 +0700] "GET /syd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:14 +0700] "GET /sym.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:16 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:18 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:20 +0700] "GET /symlink403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:22 +0700] "GET /sys.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:24 +0700] "GET /sys32.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:28 +0700] "GET /system/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:31 +0700] "GET /system/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:33 +0700] "GET /system/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:36 +0700] "GET /system/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:39 +0700] "GET /system/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:41 +0700] "GET /system/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:43 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:46 +0700] "GET /systemadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:49 +0700] "GET /systemalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:51 +0700] "GET /systembypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:53 +0700] "GET /systemk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:55 +0700] "GET /systemwp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:29:57 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:00 +0700] "GET /teamadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:04 +0700] "GET /templates/+theme+/error.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:08 +0700] "GET /templates/+theme+/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:12 +0700] "GET /templates/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:14 +0700] "GET /templates/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:17 +0700] "GET /templates/atomic/error.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:20 +0700] "GET /templates/atomic/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:22 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:24 +0700] "GET /templates/beez3/error.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:27 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:30 +0700] "GET /templates/beez5/error.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:32 +0700] "GET /templates/beez5/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:35 +0700] "GET /templates/beez_20/error.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:38 +0700] "GET /templates/beez_20/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:43 +0700] "GET /templates/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:47 +0700] "GET /templates/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:49 +0700] "GET /templates/ja_purity/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:52 +0700] "GET /templates/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:54 +0700] "GET /templates/protostar/error.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:30:57 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:00 +0700] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:03 +0700] "GET /templates/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:05 +0700] "GET /templatesadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:08 +0700] "GET /templatesalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:10 +0700] "GET /templatesbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:13 +0700] "GET /templatesk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:15 +0700] "GET /templateswp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:18 +0700] "GET /tersembunyi.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:20 +0700] "GET /tes.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:23 +0700] "GET /tesla.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:25 +0700] "GET /tesla1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:29 +0700] "GET /teslav.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:32 +0700] "GET /teslaxx.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:35 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:39 +0700] "GET /testwp.php?wp=1 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:41 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:44 +0700] "GET /tgh.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:47 +0700] "GET /theme-single.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:49 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:53 +0700] "GET /themes/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:55 +0700] "GET /themes/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:31:57 +0700] "GET /themes/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:01 +0700] "GET /themes/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:03 +0700] "GET /themes/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:05 +0700] "GET /themes/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:07 +0700] "GET /themesadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:10 +0700] "GET /themesalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:13 +0700] "GET /themesbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:17 +0700] "GET /themesk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:19 +0700] "GET /themeswp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:22 +0700] "GET /ticket.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:25 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:28 +0700] "GET /tmp/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:32 +0700] "GET /tmp/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:34 +0700] "GET /tmp/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:37 +0700] "GET /tmp/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:40 +0700] "GET /tmp/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:42 +0700] "GET /tmp/vuln.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:45 +0700] "GET /tmp/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:47 +0700] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:50 +0700] "GET /tmpadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:52 +0700] "GET /tmpalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:55 +0700] "GET /tmpbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:32:57 +0700] "GET /tmpk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:00 +0700] "GET /tmpwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:04 +0700] "GET /tonant.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:06 +0700] "GET /tools/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:09 +0700] "GET /tools/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:11 +0700] "GET /tools/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:14 +0700] "GET /tools/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:17 +0700] "GET /tools/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:21 +0700] "GET /tools/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:23 +0700] "GET /toolsadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:26 +0700] "GET /toolsalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:28 +0700] "GET /toolsbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:31 +0700] "GET /toolsk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:36 +0700] "GET /toolswp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:38 +0700] "GET /tshop.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:42 +0700] "GET /tuco.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.16.200 - - [02/Sep/2025:03:33:45 +0700] "GET /twin.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
18.201.114.101 - - [02/Sep/2025:03:36:13 +0700] "GET / HTTP/1.0" 301 1014 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)"
20.224.167.102 - - [02/Sep/2025:04:12:46 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:14:58 +0700] "HEAD /wordpress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:19:22 +0700] "HEAD /Wordpress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:22:48 +0700] "HEAD /WORDPRESS HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:24:58 +0700] "HEAD /WordPress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:26:53 +0700] "HEAD /wp HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:28:22 +0700] "HEAD /Wp HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:31:34 +0700] "HEAD /WP HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:34:09 +0700] "HEAD /old HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:35:30 +0700] "HEAD /Old HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:39:03 +0700] "HEAD /OLD HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:41:08 +0700] "HEAD /oldsite HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:43:23 +0700] "HEAD /new HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:45:52 +0700] "HEAD /New HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:48:06 +0700] "HEAD /NEW HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:49:12 +0700] "HEAD /wp-old HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:52:31 +0700] "HEAD /2022 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:53:34 +0700] "HEAD /2023 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:55:06 +0700] "HEAD /2024 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:04:59:01 +0700] "HEAD /2017 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:00:13 +0700] "HEAD /2020 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:02:48 +0700] "HEAD /2019 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:05:32 +0700] "HEAD /2018 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:06:50 +0700] "HEAD /backup HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:08:30 +0700] "HEAD /test HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:10:27 +0700] "HEAD /Test HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:13:19 +0700] "HEAD /TEST HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:14:51 +0700] "HEAD /demo HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:17:02 +0700] "HEAD /bc HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:19:19 +0700] "HEAD /www HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:20:30 +0700] "HEAD /WWW HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:22:38 +0700] "HEAD /Www HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:25:52 +0700] "HEAD /2021 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:27:16 +0700] "HEAD /main HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:28:58 +0700] "HEAD /old-site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:31:47 +0700] "HEAD /bk HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:32:36 +0700] "HEAD /Backup HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:35:50 +0700] "HEAD /BACKUP HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:37:10 +0700] "HEAD /SHOP HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:40:02 +0700] "HEAD /Shop HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:41:19 +0700] "HEAD /shop HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:43:57 +0700] "HEAD /bak HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:45:15 +0700] "HEAD /sitio HTTP/1.1" 301 211 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:48:02 +0700] "HEAD /bac HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:49:51 +0700] "HEAD /sito HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:51:38 +0700] "HEAD /site HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:53:35 +0700] "HEAD /Site HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:54:31 +0700] "HEAD /SITE HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:05:57:19 +0700] "HEAD /blog HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:06:00:11 +0700] "HEAD /BLOG HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
20.224.167.102 - - [02/Sep/2025:06:02:24 +0700] "HEAD /Blog HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:54 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1026 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /moon.php= HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /star.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /goto.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /a3.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:55 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /ay.php HTTP/1.1" 301 1016 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /00.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /moon.php?p= HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:56 +0700] "GET /readme.php HTTP/1.1" 301 1020 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /ty.php?p= HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /inputs.php?p= HTTP/1.1" 301 1060 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /wp-admin/maint/about.php?p= HTTP/1.1" 301 1074 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:57 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /g3.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /fw.php HTTP/1.1" 301 1016 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /gel4y.php? HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /let.php HTTP/1.1" 301 1017 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:58 +0700] "GET /af32.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /new2.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /hob.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /ase.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /okk.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /ola.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /yee.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /msg.php HTTP/1.1" 301 1017 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /eru.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /2eaa2.php HTTP/1.1" 301 1056 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /ave.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /pow.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /dds.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /acme.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:38:59 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 1026 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /class-db.php HTTP/1.1" 301 1059 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /bak.php?p= HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /style2.php HTTP/1.1" 301 1057 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /end.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /uplozyu.php HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /icon.php HTTP/1.1" 301 1018 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /searchl.php HTTP/1.1" 301 1058 "-" "-"
207.46.227.211 - - [02/Sep/2025:14:39:00 +0700] "GET /504.php HTTP/1.1" 301 1054 "-" "-"
194.233.65.157 - - [02/Sep/2025:21:34:50 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
103.186.31.45 - - [03/Sep/2025:00:20:06 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
110.172.98.2 - - [03/Sep/2025:02:54:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
45.141.215.127 - - [03/Sep/2025:02:57:02 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
178.128.16.200 - - [03/Sep/2025:04:01:15 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:17 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:18 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:18 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:18 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:19 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:20 +0700] "GET /alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:20 +0700] "GET /alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:20 +0700] "GET /alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:20 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:22 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:23 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:24 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:25 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:26 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:27 +0700] "GET /ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:27 +0700] "GET /ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:27 +0700] "GET /ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:29 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:30 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:32 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:34 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:34 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:35 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:36 +0700] "GET /assets/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:36 +0700] "GET /assets/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:36 +0700] "GET /assets/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:37 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:39 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:41 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:42 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:43 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:43 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:44 +0700] "GET /assets/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:44 +0700] "GET /assets/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:44 +0700] "GET /assets/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:47 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:47 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:47 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:48 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:48 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:49 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:50 +0700] "GET /upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:50 +0700] "GET /upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:50 +0700] "GET /upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:51 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:52 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:53 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:55 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:56 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:57 +0700] "GET /upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:57 +0700] "GET /upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:57 +0700] "GET /upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:58 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:01:59 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:00 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:00 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:01 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:02 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:02 +0700] "GET /uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:03 +0700] "GET /uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:03 +0700] "GET /uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:05 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:06 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:07 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:08 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:09 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:09 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:10 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:10 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:11 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:12 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:13 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:14 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:15 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:16 +0700] "GET /assets/upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:16 +0700] "GET /assets/upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:16 +0700] "GET /assets/upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:19 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:20 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:21 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:22 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:23 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:24 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:24 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:24 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:24 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:24 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:26 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:27 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:28 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:29 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:29 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:30 +0700] "GET /assets/uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:30 +0700] "GET /assets/uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:30 +0700] "GET /assets/uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:30 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:31 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:34 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:35 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:36 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:37 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:37 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:37 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:37 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:38 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:39 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:41 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:42 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:43 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:43 +0700] "GET /wp-content/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:43 +0700] "GET /wp-content/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:43 +0700] "GET /wp-content/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:44 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1118 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:44 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:45 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:46 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
178.128.16.200 - - [03/Sep/2025:04:02:47 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
206.168.34.59 - - [03/Sep/2025:05:32:05 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.59 - - [03/Sep/2025:05:32:21 +0700] "GET /login HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:45:55 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:56 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:45:56 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:56 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:45:56 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:45:57 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:57 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:57 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:57 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:57 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:58 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:45:58 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:58 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:45:58 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:58 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:59 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:59 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:45:59 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:45:59 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:00 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:46:00 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:00 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:00 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:00 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:01 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:46:01 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:01 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:01 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:02 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:03 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:03 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:03 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:03 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:04 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:04 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:04 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:04 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:04 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:05 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:05 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:05 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:05 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:06 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:06 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:06 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:06 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:06 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:07 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:07 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:07 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:07 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:08 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:09 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:09 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:09 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:09 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:10 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:10 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:10 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:10 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:10 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:11 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:11 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:11 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:11 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:12 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:12 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:12 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:12 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:46:12 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:13 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:13 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:13 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:13 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:13 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:14 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:14 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:14 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:14 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:15 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:15 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:15 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:15 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:15 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:16 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:16 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:16 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:16 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:16 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:17 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:46:17 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:17 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:46:17 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:17 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:18 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:18 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:18 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:18 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:19 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:19 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:19 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:19 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:19 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:20 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:20 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:20 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:46:20 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:21 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:21 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:21 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:21 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:21 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:22 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:22 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:22 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:22 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:22 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:23 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:23 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:23 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:23 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:23 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:24 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:24 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:24 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:46:24 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:25 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:25 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:25 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:25 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:25 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:26 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:26 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:26 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:26 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:27 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:28 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:28 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:28 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:28 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:29 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:29 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:29 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:29 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:29 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:30 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:30 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:30 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:30 +0700] "GET /images/class.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:30 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:31 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:31 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:31 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:31 +0700] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:31 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:32 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:32 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:32 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:32 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:32 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:33 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:33 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:33 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:46:33 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:34 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:34 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:34 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:34 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:34 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:35 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:35 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:35 +0700] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:35 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:36 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:36 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:36 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:36 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:36 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:37 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:37 +0700] "GET /config.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:37 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:37 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /edit-tags.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:38 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:39 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:39 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:39 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:39 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:40 +0700] "GET /webdb.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:40 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:40 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:40 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:40 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:41 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:41 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:46:41 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:41 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:42 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:42 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:42 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:42 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:42 +0700] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:43 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:43 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:43 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:43 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:44 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:44 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:44 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:44 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:44 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:45 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:45 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:45 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:45 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:45 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:46 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:46 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:46 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:46 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:47 +0700] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:47 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:47 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:47 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:47 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:46:48 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:46:48 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:48 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:48 +0700] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:48 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:49 +0700] "GET /sallu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:46:49 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:46:49 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:49 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:49 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:50 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:50 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:50 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:50 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:46:51 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:51 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:51 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:51 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:51 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:52 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:52 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:52 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:52 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:53 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:53 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:46:53 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:53 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:53 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:54 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:54 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:46:54 +0700] "GET /hehehehe.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:54 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:55 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:55 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:55 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:55 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:55 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:56 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:46:56 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:56 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:56 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:56 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:57 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:57 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:57 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:57 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:46:57 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:58 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:58 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:46:58 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:46:58 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:46:59 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:59 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:46:59 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:46:59 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:46:59 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:00 +0700] "GET /thumbs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:00 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:47:00 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:00 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:00 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:01 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:01 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:01 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:01 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:02 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:02 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:02 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:02 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:02 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:03 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:03 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:03 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:04 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:04 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:04 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:47:04 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:04 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:05 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:05 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:05 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:05 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:05 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:06 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:06 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:06 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:06 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:06 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:07 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:07 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:07 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:07 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:08 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:08 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:08 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:08 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:08 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:09 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:09 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:09 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:09 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:10 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:10 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:10 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:10 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:10 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:11 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:11 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:11 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:11 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:11 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:12 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:12 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:12 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:12 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:13 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:14 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:14 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:14 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:14 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:15 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:15 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:15 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:15 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:15 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:16 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:16 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:16 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:16 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:17 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:47:17 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:17 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:17 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:17 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:18 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:47:18 +0700] "GET /fonts/database.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:18 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:18 +0700] "GET /css/js1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:19 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:19 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:19 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:19 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:19 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:47:20 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:20 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:20 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:47:20 +0700] "GET /assets/sandi-amir.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:20 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:47:21 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:21 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:21 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:21 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:21 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:22 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:22 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:22 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:22 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:23 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:23 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:23 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:23 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:23 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:24 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:24 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:24 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:24 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:25 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:25 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:25 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:25 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:25 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:26 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:26 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:26 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:26 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:26 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:27 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:27 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:27 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:27 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:28 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:28 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:28 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:28 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:28 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:29 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:29 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:29 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:29 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:29 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:30 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:30 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:47:30 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:30 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:30 +0700] "GET /sim.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:47:31 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:31 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:31 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:31 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:32 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:32 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:32 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:32 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:32 +0700] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:33 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:33 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:33 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:34 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:47:34 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:47:34 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:35 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:35 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:35 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:35 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:35 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:47:36 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:36 +0700] "GET /wp-content/maw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:36 +0700] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:47:36 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:37 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:38 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:38 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:38 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:38 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:39 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:39 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:39 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:39 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:39 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:40 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:40 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:40 +0700] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:40 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:41 +0700] "GET /waf_defender.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:41 +0700] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:47:41 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:41 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:41 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:42 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:42 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:42 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:42 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:43 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:43 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:43 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:43 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:43 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:44 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:44 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:44 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:44 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:45 +0700] "GET /css/av.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:46 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:46 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:46 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:46 +0700] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:47 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:47 +0700] "GET /bk/index.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:47 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:47 +0700] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:47 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:48 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:48 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:47:48 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:48 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:48 +0700] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:49 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:49 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:49 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:49 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /assets/11.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:50 +0700] "GET /img/about.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:47:51 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:51 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:51 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:51 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:52 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:52 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:52 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:52 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:52 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:53 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:53 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:47:53 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:53 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:54 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:54 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:54 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:54 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:54 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:55 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:55 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:55 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:47:55 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:55 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:47:56 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:56 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:47:56 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:47:56 +0700] "GET /wp-content/languages/fucku.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:47:56 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:57 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:47:57 +0700] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:57 +0700] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:57 +0700] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:47:58 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:58 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:58 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:58 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:58 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:47:59 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:59 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:47:59 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:47:59 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:00 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:00 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:00 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:00 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:48:00 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:01 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:01 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:01 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:01 +0700] "GET /memberfuns.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /wp-comments-pos.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /testsend.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /teamx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:02 +0700] "GET /aios/firewall-rules/settings.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:03 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:03 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:03 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:03 +0700] "GET /options-reading.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:04 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:48:04 +0700] "GET /brutecp-3x-NETDRUG.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:04 +0700] "GET /nation.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:04 +0700] "GET /wh/glass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:05 +0700] "GET /live/i.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:48:05 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:05 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:05 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:05 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:06 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:48:06 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:06 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:06 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:06 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:07 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:07 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:07 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:07 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:07 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:48:08 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:08 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:08 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:08 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:09 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:09 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:09 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:09 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:09 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:10 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:10 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:10 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:48:10 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:11 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:11 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:11 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:11 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:11 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:12 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:12 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:12 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:12 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:13 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:14 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:14 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:14 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:14 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:15 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:48:15 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:15 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:15 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:15 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:16 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:16 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:16 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:16 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:17 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:17 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:17 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:17 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:17 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:18 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:18 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:48:18 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:18 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:18 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:19 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:19 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:19 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:19 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:48:19 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:20 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:20 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:48:20 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:20 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:20 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:21 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:21 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:48:21 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:21 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:22 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:22 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
146.70.160.246 - - [03/Sep/2025:08:48:22 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:22 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:22 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:23 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:23 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:23 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:23 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:24 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:24 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:24 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:24 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:24 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:25 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:48:25 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:25 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:25 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:26 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:26 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:26 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:26 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:26 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:27 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:27 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:27 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
146.70.160.246 - - [03/Sep/2025:08:48:27 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:27 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:48:28 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:28 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:28 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:28 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:28 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:29 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:29 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:29 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:29 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:48:30 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:30 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:48:30 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:30 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:30 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:31 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:31 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
146.70.160.246 - - [03/Sep/2025:08:48:31 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:31 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
146.70.160.246 - - [03/Sep/2025:08:48:32 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
146.70.160.246 - - [03/Sep/2025:08:48:33 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
146.70.160.246 - - [03/Sep/2025:08:48:33 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:33 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:33 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:34 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:34 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:34 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:34 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:34 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:35 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:35 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:35 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:35 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:48:35 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:36 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:36 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:36 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:36 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
146.70.160.246 - - [03/Sep/2025:08:48:37 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:38 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:38 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
146.70.160.246 - - [03/Sep/2025:08:48:38 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:38 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:39 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:39 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:39 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:39 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:39 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:40 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:40 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:40 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:40 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:41 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:41 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:41 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:41 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:41 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
146.70.160.246 - - [03/Sep/2025:08:48:42 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
146.70.160.246 - - [03/Sep/2025:08:48:42 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:42 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:42 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:43 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:44 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:44 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:44 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
146.70.160.246 - - [03/Sep/2025:08:48:44 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:45 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:45 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:45 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
146.70.160.246 - - [03/Sep/2025:08:48:45 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:45 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
146.70.160.246 - - [03/Sep/2025:08:48:46 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:46 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
146.70.160.246 - - [03/Sep/2025:08:48:46 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
3.138.185.30 - - [03/Sep/2025:11:37:46 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 zgrab/0.x"
144.126.133.71 - - [03/Sep/2025:13:46:53 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
185.177.72.52 - - [03/Sep/2025:14:15:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
185.177.72.54 - - [03/Sep/2025:18:34:12 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
206.168.34.44 - - [03/Sep/2025:18:56:48 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.44 - - [03/Sep/2025:18:57:06 +0700] "GET /robots.txt HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
161.35.231.175 - - [03/Sep/2025:20:12:37 +0700] "GET /assets/global/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:38 +0700] "GET /main/user/assets//kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:38 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:39 +0700] "GET /assets/plugins/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:39 +0700] "GET /asset/plugins/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:40 +0700] "GET /asset//kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:40 +0700] "GET /assets/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:40 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:41 +0700] "GET /assets/administrator/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:41 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:42 +0700] "GET /admin/tinymce/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:43 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:43 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:43 +0700] "GET /assets/admin/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:44 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:44 +0700] "GET /admin/assets/js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:44 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:45 +0700] "GET /assets/global/plugins/jquery-file-upload/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:46 +0700] "GET /main/user/assets/jquery-file-upload/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:46 +0700] "GET /assets/jquery-file-upload/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:46 +0700] "GET /assets/plugins/jquery-file-upload/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:47 +0700] "GET /asset/plugins/jquery-file-upload/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:48 +0700] "GET /asset/jquery-file-upload/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:48 +0700] "GET /assets/plugins/jquery-file-upload HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:48 +0700] "GET /assets/assets/jquery-file-upload/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:49 +0700] "GET /jquery-file-upload/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:49 +0700] "GET /jquery-file-upload HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:50 +0700] "GET /assets/administrator/jquery-file-upload HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:50 +0700] "GET /assets/admin/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:51 +0700] "GET /assets/jquery-file-upload HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:51 +0700] "GET /admin/tinymce/plugins/jquery-file-upload HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:52 +0700] "GET /admin/jquery-file-upload HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:52 +0700] "GET /js/jquery-file-upload HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:52 +0700] "GET /assets/admin/jquery-file-upload HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:53 +0700] "GET /assets/js/jquery-file-upload HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:53 +0700] "GET /admin/assets/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:54 +0700] "GET /wp-login.php?action=register HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:54 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:55 +0700] "GET /wp/wp-admin/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:55 +0700] "GET /wordpress/wp-admin/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:56 +0700] "GET /blog/wp-admin/install.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:56 +0700] "GET /new/wp-admin/install.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:56 +0700] "GET /test/wp-admin/install.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:57 +0700] "GET /old/wp-admin/install.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
161.35.231.175 - - [03/Sep/2025:20:12:57 +0700] "GET /backup/wp-admin/install.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
196.251.84.120 - - [03/Sep/2025:20:32:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
157.180.62.71 - - [03/Sep/2025:23:05:57 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Android 4.4; Tablet; rv:41.0) Gecko/41.0 Firefox/41.0"
52.231.49.200 - - [03/Sep/2025:23:22:34 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /ff6.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /easy.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /uana.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:35 +0700] "GET /duck.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:36 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:36 +0700] "GET /phpfox.php HTTP/1.1" 301 1020 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:36 +0700] "GET /x7root.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:36 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:36 +0700] "GET /ayk.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:37 +0700] "GET /api.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:38 +0700] "GET /inc.php HTTP/1.1" 301 1017 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:38 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:38 +0700] "GET /ws.php7 HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:38 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:38 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /release.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /epinyins.php HTTP/1.1" 301 1059 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:39 +0700] "GET /fm1.php HTTP/1.1" 301 1017 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:40 +0700] "GET /cloud.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:40 +0700] "GET /alfanew.php7 HTTP/1.1" 301 1059 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:40 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:40 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:40 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /we.php HTTP/1.1" 301 1016 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:41 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:42 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:42 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:42 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:42 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:42 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:43 +0700] "GET /pekok.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:43 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:43 +0700] "GET /style.php HTTP/1.1" 301 1019 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:43 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:43 +0700] "GET /x4.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /db.php?u HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1060 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /406.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:44 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:45 +0700] "GET /style2.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:45 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:45 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:45 +0700] "GET /woh.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:45 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /vuln.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /wp-aa.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 1060 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:46 +0700] "GET /admin-post.php HTTP/1.1" 301 1061 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:47 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:47 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:47 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:47 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /htaccess.php HTTP/1.1" 301 1059 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:48 +0700] "GET /gel4y.php? HTTP/1.1" 301 1019 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:49 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:49 +0700] "GET /let.php HTTP/1.1" 301 1054 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:49 +0700] "GET /pomo.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:49 +0700] "GET /af32.php HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:49 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /success.php HTTP/1.1" 301 1058 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /11.php HTTP/1.1" 301 1016 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:50 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:51 +0700] "GET /00.php HTTP/1.1" 301 1053 "-" "-"
52.231.49.200 - - [03/Sep/2025:23:22:51 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:16 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:17 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:18 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:18 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:18 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:19 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:19 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:20 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:20 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:20 +0700] "GET /as.php HTTP/1.1" 301 1016 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:21 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:21 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:22 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:22 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:23 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:23 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:23 +0700] "GET /mini HTTP/1.1" 301 1051 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:24 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:24 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:24 +0700] "GET /gg.php HTTP/1.1" 301 1016 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:25 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:26 +0700] "GET /bugz.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:26 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:26 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:27 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:27 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:27 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:28 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:28 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:28 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:29 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:30 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:30 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:30 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:31 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:31 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:31 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:32 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:32 +0700] "GET /ova.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:32 +0700] "GET /pages.php HTTP/1.1" 301 1019 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:33 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:34 +0700] "GET /php8.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:34 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:34 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:35 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:36 +0700] "GET /rt.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:36 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:36 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:37 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:38 +0700] "GET /ty.php HTTP/1.1" 301 1016 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:38 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:39 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:39 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:40 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:40 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:40 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:41 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:41 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:42 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:42 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:42 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:43 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:44 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:44 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:44 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [04/Sep/2025:00:23:45 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
196.251.83.129 - - [04/Sep/2025:04:14:39 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
199.244.88.226 - - [04/Sep/2025:04:55:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
167.71.211.29 - - [04/Sep/2025:06:20:06 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "python-requests/2.32.5"
196.251.87.53 - - [04/Sep/2025:06:31:58 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
37.19.211.50 - - [04/Sep/2025:09:25:06 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:06 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:06 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:06 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:07 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:07 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:07 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:25:07 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:08 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:08 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:25:08 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:09 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:25:09 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:09 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:25:09 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:10 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:10 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:10 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:25:10 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:11 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:11 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:11 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:12 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:12 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:25:12 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:12 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:13 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:13 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:13 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:13 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:14 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:14 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:14 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:15 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:15 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:15 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:15 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:16 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:25:16 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:16 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:17 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:17 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:17 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:18 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:18 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:18 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:18 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:19 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:19 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:19 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:25:20 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:20 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:20 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:20 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:21 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:21 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:21 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:21 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:22 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:22 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:22 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:23 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:23 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:23 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:25:23 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:25:24 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:24 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:25:24 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:24 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:25 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:25:25 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:25 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:26 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:26 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:26 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:25:26 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:27 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:25:27 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:27 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:27 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:28 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:28 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:25:28 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:29 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:29 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:29 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:29 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:30 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:25:30 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:25:30 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:31 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:31 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:31 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:31 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:32 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:32 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:32 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:32 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:33 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:33 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:25:33 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:25:34 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:34 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:34 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:34 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:35 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:35 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:35 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:25:35 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:36 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:36 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:36 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:37 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:25:37 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:37 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:37 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:25:38 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:25:38 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:38 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:38 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:39 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:39 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:39 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:25:40 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:40 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:40 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:40 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:41 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:41 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:41 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:42 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:42 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:42 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:42 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:43 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:43 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:43 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:43 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:44 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:44 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:44 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:25:45 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:45 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:45 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:45 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:46 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:25:46 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:46 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:46 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:47 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:47 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:47 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:48 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:25:48 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:48 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:48 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:49 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:49 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:49 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:49 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:25:50 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:50 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:50 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:51 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:51 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:51 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:51 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:52 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:52 +0700] "GET /images/class.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:52 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:53 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:53 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:53 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:25:53 +0700] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:54 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:54 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:54 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:25:54 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:25:55 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:55 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:55 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:25:56 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:56 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:25:56 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:56 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:57 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:25:57 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:57 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:58 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:25:58 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:58 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:25:59 +0700] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:59 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:59 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:25:59 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:00 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:00 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:00 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:00 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:26:01 +0700] "GET /config.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:01 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:01 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:02 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:26:02 +0700] "GET /edit-tags.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:02 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:02 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:03 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:26:03 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:04 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:04 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:04 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:05 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:05 +0700] "GET /webdb.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:05 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:05 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:06 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:06 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:06 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:06 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:26:07 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:07 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:07 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:08 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:08 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:08 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:08 +0700] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:09 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:09 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:26:09 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:09 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:10 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:26:10 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:10 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:11 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:11 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:11 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:26:11 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:12 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:12 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:12 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:13 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:13 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:13 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:13 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:14 +0700] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:14 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:14 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:14 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:15 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:15 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:16 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:16 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:26:16 +0700] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:16 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:17 +0700] "GET /sallu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:17 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:26:17 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:17 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:18 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:18 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:18 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:19 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:19 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:19 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:19 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:20 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:20 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:20 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:20 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:26:21 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:21 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:21 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:22 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:22 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:22 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:22 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:23 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:23 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:23 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:23 +0700] "GET /hehehehe.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:24 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:24 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:24 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:25 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:25 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:25 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:25 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:26 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:26 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:26 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:27 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:27 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:27 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:27 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:28 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:28 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:28 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:28 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:29 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:26:29 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:29 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:30 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:26:30 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:30 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:30 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:30 +0700] "GET /thumbs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:26:31 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:31 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:31 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:26:32 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:32 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:32 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:32 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:33 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:33 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:34 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:34 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:26:34 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:34 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:26:35 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:35 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:36 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:36 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:36 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:36 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:37 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:37 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:37 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:37 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:38 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:38 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:38 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:39 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:39 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:39 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:39 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:40 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:40 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:40 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:40 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:41 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:41 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:41 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:42 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:42 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:42 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:26:42 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:43 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:43 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:43 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:44 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:44 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:44 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:44 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:45 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:45 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:45 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:45 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:46 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:46 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:46 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:47 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:47 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:47 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:48 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:48 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:48 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:26:48 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:49 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:49 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:49 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:50 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:50 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:50 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:50 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:51 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:51 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:51 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:51 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:52 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:52 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:52 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:53 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:53 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:53 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:26:53 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:54 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:54 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:54 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:26:54 +0700] "GET /fonts/database.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:55 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:55 +0700] "GET /css/js1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:26:55 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:56 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:56 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:26:56 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:56 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:57 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:57 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:57 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:26:58 +0700] "GET /assets/sandi-amir.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:58 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:58 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:26:58 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:26:59 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:26:59 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:26:59 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:26:59 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:27:00 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:00 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:01 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:01 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:27:01 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:01 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:02 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:02 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:02 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:03 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:03 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:03 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:04 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:04 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:04 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:04 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:05 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:05 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:05 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:05 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:06 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:06 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:06 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:07 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:27:07 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:07 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:08 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:08 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:08 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:08 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:09 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:09 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:09 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:10 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:10 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:10 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:10 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:11 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:11 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:11 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:11 +0700] "GET /sim.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:27:12 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:12 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:12 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:13 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:27:13 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:13 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:13 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:14 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:14 +0700] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:14 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:14 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:15 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:15 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:15 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:16 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:16 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:16 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:27:16 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:17 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:17 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:27:17 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:18 +0700] "GET /wp-content/maw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:27:18 +0700] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:18 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:18 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:19 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:19 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:19 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:19 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:20 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:20 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:20 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:21 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:21 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:21 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:21 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:22 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:22 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:22 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:22 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:23 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:23 +0700] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:23 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:27:24 +0700] "GET /waf_defender.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:24 +0700] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:24 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:24 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:25 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:25 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:25 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:25 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:27:26 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:26 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:26 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:27 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:27 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:27 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:27 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:28 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:28 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:28 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:29 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:29 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:29 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:27:29 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:30 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:30 +0700] "GET /css/av.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:30 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:30 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:31 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:31 +0700] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:31 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:32 +0700] "GET /bk/index.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:32 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:32 +0700] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:32 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:33 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:33 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:33 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:27:33 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:27:34 +0700] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:34 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:34 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:35 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:35 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:35 +0700] "GET /assets/11.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:35 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:36 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:36 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:36 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:36 +0700] "GET /img/about.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:37 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:37 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:37 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:38 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:27:38 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:38 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:39 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:39 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:39 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:27:39 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:40 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:40 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:40 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:41 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:41 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:27:41 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:41 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:42 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:42 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:42 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:43 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:43 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:43 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:43 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:44 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:27:44 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:44 +0700] "GET /wp-content/languages/fucku.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:44 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:45 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:45 +0700] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:45 +0700] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:46 +0700] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:27:46 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:46 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:27:46 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:47 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:47 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:47 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:47 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:48 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:48 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:48 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:49 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:49 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:49 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:27:49 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:50 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:27:50 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:50 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:50 +0700] "GET /memberfuns.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:27:51 +0700] "GET /wp-comments-pos.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:51 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:51 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:52 +0700] "GET /testsend.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:27:52 +0700] "GET /teamx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:52 +0700] "GET /aios/firewall-rules/settings.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:52 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:53 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:53 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:53 +0700] "GET /options-reading.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:54 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:54 +0700] "GET /brutecp-3x-NETDRUG.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:54 +0700] "GET /nation.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:54 +0700] "GET /wh/glass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:55 +0700] "GET /live/i.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:27:55 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:55 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:27:55 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:27:56 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:27:56 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:56 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:27:57 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:27:57 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:57 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:27:57 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:27:58 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:27:58 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:58 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:27:59 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:27:59 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:03 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:04 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:04 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:06 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.50 - - [04/Sep/2025:09:28:06 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:28:07 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:07 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:28:08 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:28:08 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:08 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:28:09 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:28:09 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:28:09 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:10 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:10 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:28:10 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:28:10 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:11 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:11 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:11 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:12 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:12 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:12 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:12 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:13 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:13 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:13 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:13 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:28:14 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:14 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:14 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:14 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:15 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:15 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:15 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:15 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:16 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:16 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:16 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:16 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:17 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:17 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:18 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:18 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:18 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:28:18 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:19 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:28:19 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:28:19 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:19 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:20 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:20 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:20 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:21 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:21 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:28:21 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:21 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:22 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:28:22 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:22 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:23 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:23 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:23 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:24 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:28:24 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:24 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:24 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:25 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:28:25 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:25 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:26 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:28:26 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:26 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.50 - - [04/Sep/2025:09:28:26 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:27 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:28:27 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:27 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:27 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:28 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:28 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:28 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:29 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:29 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:29 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:29 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:30 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:30 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:30 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:30 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:28:31 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:31 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:28:31 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:32 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:32 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:32 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:32 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:33 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:33 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:33 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:33 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:34 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:28:34 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:34 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:35 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
37.19.211.50 - - [04/Sep/2025:09:28:35 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:35 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
37.19.211.50 - - [04/Sep/2025:09:28:35 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:36 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:28:36 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:36 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:37 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:37 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:37 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
37.19.211.50 - - [04/Sep/2025:09:28:37 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:28:38 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:28:38 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:38 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:38 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:39 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:39 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
37.19.211.50 - - [04/Sep/2025:09:28:39 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:40 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:40 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:40 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:40 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:41 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:28:41 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:41 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:42 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:42 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:42 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:43 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:43 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:43 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.50 - - [04/Sep/2025:09:28:43 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:44 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:44 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
37.19.211.50 - - [04/Sep/2025:09:28:44 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:44 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:45 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:45 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:45 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:46 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:46 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:46 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
37.19.211.50 - - [04/Sep/2025:09:28:46 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
37.19.211.50 - - [04/Sep/2025:09:28:47 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:47 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:47 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:47 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.50 - - [04/Sep/2025:09:28:48 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:48 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.50 - - [04/Sep/2025:09:28:48 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
37.19.211.50 - - [04/Sep/2025:09:28:49 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
37.19.211.50 - - [04/Sep/2025:09:28:49 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
37.19.211.50 - - [04/Sep/2025:09:28:49 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.136 - - [04/Sep/2025:09:28:50 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.136 - - [04/Sep/2025:09:28:50 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.136 - - [04/Sep/2025:09:28:50 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:51 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:51 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.136 - - [04/Sep/2025:09:28:51 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:51 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.136 - - [04/Sep/2025:09:28:52 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.136 - - [04/Sep/2025:09:28:52 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
37.19.211.136 - - [04/Sep/2025:09:28:52 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:53 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:53 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:53 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:53 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:54 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
37.19.211.136 - - [04/Sep/2025:09:28:54 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
37.19.211.136 - - [04/Sep/2025:09:28:54 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
37.19.211.136 - - [04/Sep/2025:09:28:54 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:55 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:55 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:55 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
37.19.211.136 - - [04/Sep/2025:09:28:56 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:56 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.19.211.136 - - [04/Sep/2025:09:28:56 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
138.197.172.22 - - [04/Sep/2025:10:26:37 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
138.197.172.22 - - [04/Sep/2025:10:26:37 +0700] "GET /favicon.ico HTTP/1.1" 301 1058 "http://jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
177.136.220.116 - - [04/Sep/2025:11:16:21 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
177.136.220.116 - - [04/Sep/2025:11:16:22 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
3.131.152.255 - - [04/Sep/2025:11:34:53 +0700] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 1112 "www.google.com" "Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0"
51.222.21.68 - - [04/Sep/2025:13:02:24 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0"
51.222.21.68 - - [04/Sep/2025:13:02:28 +0700] "POST / HTTP/1.1" 301 1047 "-" "Mozilla/5.0"
51.222.21.68 - - [04/Sep/2025:13:02:30 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0"
54.210.130.195 - - [04/Sep/2025:13:04:35 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; U; Android 4.2; en-us; sdk Build/MR1) AppleWebKit/535.19 (KHTML, like Gecko) Version/4.2 Safari/535.19"
2.58.56.215 - - [04/Sep/2025:14:53:58 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
92.223.85.247 - - [04/Sep/2025:17:39:11 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.223.85.247 - - [04/Sep/2025:17:39:11 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.177.72.107 - - [04/Sep/2025:19:34:04 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
13.79.168.144 - - [05/Sep/2025:03:09:08 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:09 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:09 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:10 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:10 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:10 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:11 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 1104 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:11 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:11 +0700] "GET /xc.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:12 +0700] "GET /wp.php HTTP/1.1" 301 1016 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:12 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:13 +0700] "GET /class20.php HTTP/1.1" 301 1058 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:13 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:14 +0700] "GET /wp-gr.php HTTP/1.1" 301 1056 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:14 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:14 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
13.79.168.144 - - [05/Sep/2025:03:09:15 +0700] "GET /axx.php HTTP/1.1" 301 1054 "-" "-"
185.54.231.10 - - [05/Sep/2025:05:27:02 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.54.231.10 - - [05/Sep/2025:05:27:02 +0700] "POST / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.177.72.204 - - [05/Sep/2025:10:20:16 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
103.248.202.186 - - [05/Sep/2025:10:31:07 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
103.248.202.186 - - [05/Sep/2025:10:31:07 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
45.94.31.13 - - [05/Sep/2025:11:40:01 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
52.169.141.253 - - [05/Sep/2025:13:24:36 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:37 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:37 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:38 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:38 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:38 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:39 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:39 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:40 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:40 +0700] "GET /as.php HTTP/1.1" 301 1016 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:41 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:41 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:42 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:42 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:42 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:43 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:43 +0700] "GET /mini HTTP/1.1" 301 1051 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:44 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:44 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:44 +0700] "GET /gg.php HTTP/1.1" 301 1016 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:45 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:47 +0700] "GET /bugz.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:47 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:47 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:48 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:48 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:48 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:49 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:49 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:50 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:50 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:51 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:51 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:52 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:52 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:53 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:53 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:53 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:54 +0700] "GET /ova.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:54 +0700] "GET /pages.php HTTP/1.1" 301 1019 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:55 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:56 +0700] "GET /php8.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:56 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:56 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:57 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:57 +0700] "GET /rt.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:58 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:58 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:58 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:59 +0700] "GET /ty.php HTTP/1.1" 301 1016 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:24:59 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:01 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:02 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:02 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:03 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:03 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:03 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:04 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:05 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:05 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:06 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:07 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:08 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:08 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:09 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.253 - - [05/Sep/2025:13:25:09 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
167.172.66.162 - - [05/Sep/2025:14:03:42 +0700] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:03:44 +0700] "GET /Chitoge.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:03:48 +0700] "GET /yuuki.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:03:59 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:04 +0700] "GET /.fk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:05 +0700] "GET /.tmb/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:23 +0700] "GET /.tmb/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:26 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:32 +0700] "GET /.tmb/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:34 +0700] "GET /.tmb/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:46 +0700] "GET /.tmb/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:49 +0700] "GET /.tmbadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:51 +0700] "GET /.tmbalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:55 +0700] "GET /.tmbbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:57 +0700] "GET /.tmbk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:04:59 +0700] "GET /.tmbwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:01 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:17 +0700] "GET /.well-known/404.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:26 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:27 +0700] "GET /.well-known/a.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:36 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:39 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:05:48 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:00 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:06 +0700] "GET /.well-known/acme-challenge/alfa.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:11 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:22 +0700] "GET /.well-known/acme-challenge/bypass.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:28 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:30 +0700] "GET /.well-known/acme-challenge/k.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:39 +0700] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:42 +0700] "GET /.well-known/acme-challenge/wp.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:45 +0700] "GET /.well-known/acme-challengeadmin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:48 +0700] "GET /.well-known/acme-challengealfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:06:55 +0700] "GET /.well-known/acme-challengebypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:18 +0700] "GET /.well-known/acme-challengek.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:21 +0700] "GET /.well-known/acme-challengewp.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:26 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:30 +0700] "GET /.well-known/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:34 +0700] "GET /.well-known/am.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:46 +0700] "GET /.well-known/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:54 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:07:58 +0700] "GET /.well-known/fw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:09 +0700] "GET /.well-known/gelay.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:11 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:19 +0700] "GET /.well-known/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:31 +0700] "GET /.well-known/leaf.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:32 +0700] "GET /.well-known/leafmailer.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:35 +0700] "GET /.well-known/leafmailer2.8.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:38 +0700] "GET /.well-known/mari.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:46 +0700] "GET /.well-known/maro.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:50 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:53 +0700] "GET /.well-known/pki-validation/alfa.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:08:58 +0700] "GET /.well-known/pki-validation/bypass.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:08 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:15 +0700] "GET /.well-known/pki-validation/k.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:21 +0700] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:24 +0700] "GET /.well-known/pki-validation/wp.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:31 +0700] "GET /.well-known/pki-validationadmin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:35 +0700] "GET /.well-known/pki-validationalfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:39 +0700] "GET /.well-known/pki-validationbypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:44 +0700] "GET /.well-known/pki-validationk.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:47 +0700] "GET /.well-known/pki-validationwp.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:55 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:09:56 +0700] "GET /.well-known/shell.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:03 +0700] "GET /.well-known/upl.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:04 +0700] "GET /.well-known/wp-signup.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:07 +0700] "GET /.well-known/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:23 +0700] "GET /.well-known/x.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:26 +0700] "GET /.well-knownadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:26 +0700] "GET /.well-knownalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:34 +0700] "GET /.well-knownbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:39 +0700] "GET /.well-knownk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:44 +0700] "GET /.well-knownold/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:47 +0700] "GET /.well-knownwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:10:58 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:06 +0700] "GET /images/sym.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:19 +0700] "GET /wp-content/a.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:23 +0700] "GET /wp-content/fm.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:27 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:29 +0700] "GET /01.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:33 +0700] "GET /07.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:11:53 +0700] "GET /098.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:06 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:11 +0700] "GET /0o.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:19 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:28 +0700] "GET /0x0.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:34 +0700] "GET /0z.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:42 +0700] "GET /1.aspx HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:44 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:45 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:46 +0700] "GET /100.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:48 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:51 +0700] "GET /1100.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:55 +0700] "GET /1111.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:58 +0700] "GET /11index.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:12:59 +0700] "GET /12.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:01 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:03 +0700] "GET /1234.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:06 +0700] "GET /12r4jd.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:09 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:10 +0700] "GET /1313.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:16 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:23 +0700] "GET /14.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:26 +0700] "GET /15.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:34 +0700] "GET /159.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:41 +0700] "GET /16.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:46 +0700] "GET /17.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:48 +0700] "GET /18.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:13:52 +0700] "GET /1877.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:04 +0700] "GET /19.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:07 +0700] "GET /1945.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:15 +0700] "GET /1975.phP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:21 +0700] "GET /1975.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:30 +0700] "GET /1975.php?CVE=2021 HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:34 +0700] "GET /1975.php?CVE=2022 HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:44 +0700] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:48 +0700] "GET /1@.pHtml HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:48 +0700] "GET /1@.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:49 +0700] "GET /1index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:50 +0700] "GET /1index.php?pass=shell HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:14:55 +0700] "GET /1nt3pqdk.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:00 +0700] "GET /1xleet.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:09 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:11 +0700] "GET /20.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:15 +0700] "GET /21.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:16 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:27 +0700] "GET /23.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:31 +0700] "GET /24.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:44 +0700] "GET /25.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:49 +0700] "GET /2index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:56 +0700] "GET /2index.php?pass=shell HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:15:59 +0700] "GET /2s90o.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:02 +0700] "GET /2xmpz0.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:05 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:06 +0700] "GET /301.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:19 +0700] "GET /303.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:22 +0700] "GET /3301.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:28 +0700] "GET /3index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:32 +0700] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:36 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:37 +0700] "GET /401.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:45 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:47 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:50 +0700] "GET /404webshell.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:51 +0700] "GET /405.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:53 +0700] "GET /41.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:16:57 +0700] "GET /45.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:10 +0700] "GET /4index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:21 +0700] "GET /4lin.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:24 +0700] "GET /4mosan.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:33 +0700] "GET /4price.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:40 +0700] "GET /4x4.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:47 +0700] "GET /5.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:50 +0700] "GET /529.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:17:51 +0700] "GET /5index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:02 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:04 +0700] "GET /63ck0.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:24 +0700] "GET /6index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:33 +0700] "GET /7.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:37 +0700] "GET /73.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:39 +0700] "GET /777.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:41 +0700] "GET /78.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:46 +0700] "GET /7index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:52 +0700] "GET /7root.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:18:55 +0700] "GET /7yn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:05 +0700] "GET /8.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:07 +0700] "GET /87.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:15 +0700] "GET /88.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:16 +0700] "GET /888.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:19 +0700] "GET /8890.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:30 +0700] "GET /8index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:37 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:41 +0700] "GET /991176.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:45 +0700] "GET /9index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:45 +0700] "GET /?loadmebaby HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:48 +0700] "GET /AK-74.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:52 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:19:57 +0700] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:17 +0700] "GET /ALFA_DATA/alfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:19 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:31 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:43 +0700] "GET /ALFA_DATA/bypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:50 +0700] "GET /ALFA_DATA/index.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:54 +0700] "GET /ALFA_DATA/k.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:20:56 +0700] "GET /ALFA_DATA/wp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:04 +0700] "GET /ALFA_DATAadmin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:09 +0700] "GET /ALFA_DATAalfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:10 +0700] "GET /ALFA_DATAbypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:13 +0700] "GET /ALFA_DATAk.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:18 +0700] "GET /ALFA_DATAwp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:20 +0700] "GET /Admin-ajax.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:26 +0700] "GET /Alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:29 +0700] "GET /Alfashell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
217.217.252.15 - - [05/Sep/2025:14:21:34 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
167.172.66.162 - - [05/Sep/2025:14:21:36 +0700] "GET /Alfawso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:39 +0700] "GET /Anonsec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:42 +0700] "GET /Bulle.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:52 +0700] "GET /Byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:21:53 +0700] "GET /D7.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:21 +0700] "GET /DC.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:23 +0700] "GET /Dz.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:26 +0700] "GET /FX.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:28 +0700] "GET /Fdbxhriw.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:30 +0700] "GET /FoxWSO-full.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:48 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:51 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:52 +0700] "GET /FoxWSOv2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:58 +0700] "GET /Gel.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:22:59 +0700] "GET /Idx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:19 +0700] "GET /IndoXploit.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:19 +0700] "GET /Init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:34 +0700] "GET /Leaf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:37 +0700] "GET /M1.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:45 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:55 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:23:59 +0700] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:10 +0700] "GET /MyShell.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:13 +0700] "GET /Ninja.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:18 +0700] "GET /PHP_Shell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:25 +0700] "GET /Priv.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:27 +0700] "GET /RxR.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:30 +0700] "GET /Sendemail.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:40 +0700] "GET /Simple_PHP_backdoor.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:46 +0700] "GET /Uploader.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:51 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:51 +0700] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.34.240.110 - - [05/Sep/2025:14:24:52 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:52 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:24:52 +0700] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.34.240.110 - - [05/Sep/2025:14:24:53 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
167.172.66.162 - - [05/Sep/2025:14:24:53 +0700] "GET /Uploading.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:53 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.34.240.110 - - [05/Sep/2025:14:24:54 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:54 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:54 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.34.240.110 - - [05/Sep/2025:14:24:58 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:58 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:24:59 +0700] "GET /V3.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:59 +0700] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:24:59 +0700] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:00 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.34.240.110 - - [05/Sep/2025:14:25:00 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.34.240.110 - - [05/Sep/2025:14:25:00 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.34.240.110 - - [05/Sep/2025:14:25:01 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
167.172.66.162 - - [05/Sep/2025:14:25:01 +0700] "GET /V5.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:01 +0700] "GET /backup/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.34.240.110 - - [05/Sep/2025:14:25:02 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:25:07 +0700] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.34.240.110 - - [05/Sep/2025:14:25:07 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:07 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.34.240.110 - - [05/Sep/2025:14:25:08 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:08 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:09 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.34.240.110 - - [05/Sep/2025:14:25:09 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.34.240.110 - - [05/Sep/2025:14:25:09 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:25:10 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:10 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:21 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:25:21 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:22 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:22 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:22 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:23 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:23 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:25:24 +0700] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:24 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.34.240.110 - - [05/Sep/2025:14:25:25 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:25:25 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:25:28 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:25:34 +0700] "GET /Xzd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:40 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:40 +0700] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:41 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.34.240.110 - - [05/Sep/2025:14:25:41 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:25:41 +0700] "GET /a.aspx HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:41 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:42 +0700] "GET /assets/css/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:42 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:42 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:43 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.34.240.110 - - [05/Sep/2025:14:25:43 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
167.172.66.162 - - [05/Sep/2025:14:25:46 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:25:55 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:57 +0700] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:57 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:57 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:25:58 +0700] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:25:58 +0700] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
167.172.66.162 - - [05/Sep/2025:14:25:58 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:58 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.34.240.110 - - [05/Sep/2025:14:25:59 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:25:59 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.34.240.110 - - [05/Sep/2025:14:25:59 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:00 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:09 +0700] "GET /private/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.34.240.110 - - [05/Sep/2025:14:26:10 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.34.240.110 - - [05/Sep/2025:14:26:10 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:11 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:11 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:11 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:12 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:12 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.34.240.110 - - [05/Sep/2025:14:26:12 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:26:13 +0700] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
167.172.66.162 - - [05/Sep/2025:14:26:16 +0700] "GET /aab.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:19 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:23 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:23 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:26:23 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:23 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:24 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.34.240.110 - - [05/Sep/2025:14:26:24 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:26:24 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:25 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:25 +0700] "GET /abby.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:25 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:25 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:29 +0700] "GET /abc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:37 +0700] "GET /abcde.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:37 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:38 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:38 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:38 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.34.240.110 - - [05/Sep/2025:14:26:39 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:39 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.34.240.110 - - [05/Sep/2025:14:26:39 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:40 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:40 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:40 +0700] "GET /Site/ HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:50 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:53 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:53 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:54 +0700] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.34.240.110 - - [05/Sep/2025:14:26:54 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.34.240.110 - - [05/Sep/2025:14:26:54 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:26:54 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.34.240.110 - - [05/Sep/2025:14:26:56 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.34.240.110 - - [05/Sep/2025:14:26:56 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:26:56 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:26:56 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:26:58 +0700] "GET /about.php?520 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:01 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:03 +0700] "GET /aci.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:12 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.34.240.110 - - [05/Sep/2025:14:27:13 +0700] "GET /index/function.php/img/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:13 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:14 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.34.240.110 - - [05/Sep/2025:14:27:14 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:27:14 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:15 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.34.240.110 - - [05/Sep/2025:14:27:15 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.34.240.110 - - [05/Sep/2025:14:27:16 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:16 +0700] "GET /shop/ HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
167.172.66.162 - - [05/Sep/2025:14:27:20 +0700] "GET /adm.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:30 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:30 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.34.240.110 - - [05/Sep/2025:14:27:30 +0700] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:31 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.34.240.110 - - [05/Sep/2025:14:27:31 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:31 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:32 +0700] "GET /adm/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:32 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:33 +0700] "GET /autoloadclassmap.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:33 +0700] "GET /about/function.php/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.34.240.110 - - [05/Sep/2025:14:27:33 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
154.47.25.99 - - [05/Sep/2025:14:27:38 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:38 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
154.47.25.99 - - [05/Sep/2025:14:27:38 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
154.47.25.99 - - [05/Sep/2025:14:27:39 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:39 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:39 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
154.47.25.99 - - [05/Sep/2025:14:27:40 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:40 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
154.47.25.99 - - [05/Sep/2025:14:27:40 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:41 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:41 +0700] "GET /admadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:42 +0700] "GET /admalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
154.47.25.99 - - [05/Sep/2025:14:27:44 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:49 +0700] "GET /admbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:52 +0700] "GET /admin-heade.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:27:58 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:08 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:09 +0700] "GET /admin/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:11 +0700] "GET /admin/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:18 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:20 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:23 +0700] "GET /admin/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:24 +0700] "GET /admin/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:25 +0700] "GET /admin1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:26 +0700] "GET /admin403.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:28 +0700] "GET /admin404.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:34 +0700] "GET /adminadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:45 +0700] "GET /adminalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:46 +0700] "GET /adminbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:28:51 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:06 +0700] "GET /administrator/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:10 +0700] "GET /administrator/alfa.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:13 +0700] "GET /administrator/bypass.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:16 +0700] "GET /administrator/index.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:18 +0700] "GET /administrator/k.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:22 +0700] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:34 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:36 +0700] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:41 +0700] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:29:56 +0700] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:14 +0700] "GET /administrator/wp.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:16 +0700] "GET /administratoradmin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:19 +0700] "GET /administratoralfa.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:21 +0700] "GET /administratorbypass.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:26 +0700] "GET /administratork.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:27 +0700] "GET /administratorwp.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:32 +0700] "GET /admink.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:36 +0700] "GET /adminweb/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:40 +0700] "GET /adminweb/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:52 +0700] "GET /adminweb/bypass.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:54 +0700] "GET /adminweb/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:30:56 +0700] "GET /adminweb/k.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:13 +0700] "GET /adminweb/wp.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:20 +0700] "GET /adminwebadmin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:26 +0700] "GET /adminwebalfa.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:29 +0700] "GET /adminwebbypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:31 +0700] "GET /adminwebk.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:37 +0700] "GET /adminwebwp.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:42 +0700] "GET /adminwp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:53 +0700] "GET /admk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:31:57 +0700] "GET /admnin/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:09 +0700] "GET /admnin/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:12 +0700] "GET /admnin/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:15 +0700] "GET /admnin/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:21 +0700] "GET /admnin/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:24 +0700] "GET /admnin/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:36 +0700] "GET /admwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:43 +0700] "GET /adriv.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:43 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:45 +0700] "GET /ah.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:46 +0700] "GET /ak.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:32:53 +0700] "GET /ak47shell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:05 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:06 +0700] "GET /alex.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:09 +0700] "GET /alexus-mailer.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:13 +0700] "GET /alexus.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:18 +0700] "GET /alexuse.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:29 +0700] "GET /alexusmailer-2.0.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:31 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:44 +0700] "GET /alf4.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:46 +0700] "GET /alf42.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:50 +0700] "GET /alfa-ioxi.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:33:59 +0700] "GET /alfa-shell-v4.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:05 +0700] "GET /alfa-v4.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:10 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:14 +0700] "GET /alfa1.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:15 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:18 +0700] "GET /alfa1337.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:19 +0700] "GET /alfa3.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:20 +0700] "GET /alfaaneh.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:22 +0700] "GET /alfacgiapi/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:30 +0700] "GET /alfacgiapi/alfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:34 +0700] "GET /alfacgiapi/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:48 +0700] "GET /alfacgiapi/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:51 +0700] "GET /alfacgiapi/k.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:52 +0700] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:34:58 +0700] "GET /alfacgiapi/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:07 +0700] "GET /alfacgiapiadmin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:18 +0700] "GET /alfacgiapialfa.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:21 +0700] "GET /alfacgiapibypass.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:22 +0700] "GET /alfacgiapik.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:24 +0700] "GET /alfacgiapiwp.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:35 +0700] "GET /alfaindex.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:36 +0700] "GET /alfakun.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:44 +0700] "GET /alfalonte.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:55 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:35:58 +0700] "GET /alfanibos.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:04 +0700] "GET /alfashell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:10 +0700] "GET /alfatesla.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:18 +0700] "GET /alfateslav4.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:21 +0700] "GET /alfav4-1-0.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:24 +0700] "GET /alfav4-1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:32 +0700] "GET /alfav4-1.tesla.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:44 +0700] "GET /alfav4.1-tesla.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:49 +0700] "GET /alfav4.1.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:52 +0700] "GET /alfax.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:57 +0700] "GET /alfi.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:36:59 +0700] "GET /alivos.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:14 +0700] "GET /alpa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:18 +0700] "GET /alpha.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:23 +0700] "GET /alwso.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:39 +0700] "GET /am.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:42 +0700] "GET /am4n.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:50 +0700] "GET /aman.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:52 +0700] "GET /anjay.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:37:57 +0700] "GET /anon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:04 +0700] "GET /anone.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:08 +0700] "GET /anons79.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:12 +0700] "GET /anonsec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:18 +0700] "GET /anonym.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:23 +0700] "GET /ans.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:25 +0700] "GET /antek.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:27 +0700] "GET /antiheker.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:32 +0700] "GET /ap.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:45 +0700] "GET /app/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:47 +0700] "GET /app/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:52 +0700] "GET /app/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:54 +0700] "GET /app/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:38:59 +0700] "GET /app/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:08 +0700] "GET /app/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:12 +0700] "GET /appadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:17 +0700] "GET /appalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:21 +0700] "GET /appbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:25 +0700] "GET /appk.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:32 +0700] "GET /application/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:37 +0700] "GET /application/alfa.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:40 +0700] "GET /application/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:39:49 +0700] "GET /application/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:00 +0700] "GET /application/k.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:11 +0700] "GET /application/wp.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:14 +0700] "GET /applicationadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:16 +0700] "GET /applicationalfa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
145.220.91.19 - - [05/Sep/2025:14:40:22 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0"
167.172.66.162 - - [05/Sep/2025:14:40:28 +0700] "GET /applicationbypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:30 +0700] "GET /applicationk.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:35 +0700] "GET /applicationwp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:37 +0700] "GET /appwp.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:44 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:49 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:40:50 +0700] "GET /as/function HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:14 +0700] "GET /asd.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:29 +0700] "GET /aset/admin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:34 +0700] "GET /aset/alfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:40 +0700] "GET /aset/bypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:43 +0700] "GET /aset/index.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:47 +0700] "GET /aset/k.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:49 +0700] "GET /aset/wp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:50 +0700] "GET /asetadmin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:51 +0700] "GET /asetalfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:41:53 +0700] "GET /asetbypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:03 +0700] "GET /asetk.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:10 +0700] "GET /asetwp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:11 +0700] "GET /asset/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:16 +0700] "GET /asset/alfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:19 +0700] "GET /asset/bypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:22 +0700] "GET /asset/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:24 +0700] "GET /asset/k.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:30 +0700] "GET /asset/wp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:34 +0700] "GET /assetadmin.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:43 +0700] "GET /assetalfa.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:51 +0700] "GET /assetbypass.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:53 +0700] "GET /assetk.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:42:58 +0700] "GET /assets/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:07 +0700] "GET /assets/alfa.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:17 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:19 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:20 +0700] "GET /assets/k.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:25 +0700] "GET /assets/wp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:29 +0700] "GET /assetsadmin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:36 +0700] "GET /assetsalfa.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:38 +0700] "GET /assetsbypass.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:39 +0700] "GET /assetsk.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:47 +0700] "GET /assetswp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:52 +0700] "GET /assetwp.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:43:58 +0700] "GET /asu.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:09 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:14 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:24 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:26 +0700] "GET /ayk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:35 +0700] "GET /azdare.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:41 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:43 +0700] "GET /b374k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:47 +0700] "GET /back.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:49 +0700] "GET /baindex.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:52 +0700] "GET /base.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:44:59 +0700] "GET /batm.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:07 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:08 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:11 +0700] "GET /beence.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:13 +0700] "GET /bin/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:14 +0700] "GET /bin/alfa.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:15 +0700] "GET /bin/bypass.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:20 +0700] "GET /bin/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:30 +0700] "GET /bin/k.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:35 +0700] "GET /bin/wp.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:38 +0700] "GET /binadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:43 +0700] "GET /binalfa.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [05/Sep/2025:14:45:48 +0700] "GET /binbypass.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
216.194.112.132 - - [05/Sep/2025:16:31:38 +0700] "GET /ALFA_DATA/alfacgiapi HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
45.148.10.140 - - [06/Sep/2025:00:02:18 +0700] "GET /.git/config HTTP/1.1" 403 1590 "-" "Go-http-client/1.1"
217.160.202.182 - - [06/Sep/2025:01:26:14 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54"
92.223.85.60 - - [06/Sep/2025:02:44:13 +0700] "GET /.env HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.223.85.60 - - [06/Sep/2025:02:44:13 +0700] "POST / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
199.45.154.147 - - [06/Sep/2025:05:31:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
199.45.154.147 - - [06/Sep/2025:05:31:54 +0700] "GET /robots.txt HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
52.169.141.253 - - [06/Sep/2025:06:38:49 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:50 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:50 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:51 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:51 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:51 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:52 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:52 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:52 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.253 - - [06/Sep/2025:06:38:53 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
110.172.98.2 - - [06/Sep/2025:06:45:08 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
172.190.142.176 - - [06/Sep/2025:06:45:28 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:29 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:29 +0700] "GET /bv3.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:30 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:30 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:31 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:31 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:32 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:32 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:33 +0700] "GET /gold.php HTTP/1.1" 301 1018 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:34 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:35 +0700] "GET /wp-gr.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:35 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:35 +0700] "GET /co.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:36 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:36 +0700] "GET /aua.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:37 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:37 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:38 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:38 +0700] "GET /class9.php HTTP/1.1" 301 1020 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:39 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:40 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:40 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:41 +0700] "GET /witmm.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:41 +0700] "GET /lo.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [06/Sep/2025:06:45:42 +0700] "GET /asd67.php HTTP/1.1" 301 1056 "-" "-"
185.177.72.204 - - [06/Sep/2025:07:08:48 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
103.98.62.106 - - [06/Sep/2025:10:35:32 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
103.98.62.106 - - [06/Sep/2025:10:35:33 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:11 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:16 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:18 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:20 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:26 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:28 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.164.49 - - [06/Sep/2025:11:05:29 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
93.123.109.175 - - [06/Sep/2025:11:05:30 +0700] "GET /.git/config HTTP/1.1" 403 1590 "-" "Go-http-client/1.1"
167.172.66.162 - - [06/Sep/2025:12:46:18 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:22 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:26 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:31 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:35 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:46 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:53 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:56 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:46:59 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:06 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:08 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:12 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:17 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:22 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:26 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:28 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:30 +0700] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:36 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:41 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:45 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:48 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:51 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:53 +0700] "GET /db.php?u HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:55 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:47:59 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:09 +0700] "GET /Byp.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:12 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:17 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:20 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:25 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:27 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:29 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:34 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:40 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:43 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:50 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:48:56 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:03 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:08 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:18 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:20 +0700] "GET /wp-edit.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:23 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:29 +0700] "GET /cok.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:32 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:40 +0700] "GET /idk.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:43 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:46 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:53 +0700] "GET /alpa.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:49:59 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:02 +0700] "GET /alfax.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:07 +0700] "GET /memek.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:09 +0700] "GET /kontol.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:13 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:17 +0700] "GET /clen.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:22 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:27 +0700] "GET /caches.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:31 +0700] "GET /creates.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:33 +0700] "GET /fr.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:37 +0700] "GET /index404.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:46 +0700] "GET /stats.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:49 +0700] "GET /azdare.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:55 +0700] "GET /laymu.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:50:58 +0700] "GET /macibay.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:05 +0700] "GET /fdgfdgdsfd.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:10 +0700] "GET /wp-update.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:12 +0700] "GET /legal.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:14 +0700] "GET /yuuki2.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:20 +0700] "GET /rootshell.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:22 +0700] "GET /rexx.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:24 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:29 +0700] "GET /tes.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:32 +0700] "GET /twin.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:35 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:40 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:44 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:48 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:51:56 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:03 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:09 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:11 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:15 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:18 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:22 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:25 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:28 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:30 +0700] "GET /n.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:32 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:38 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:47 +0700] "GET /q.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:52 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:55 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:57 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:52:59 +0700] "GET /u.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:02 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:05 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:10 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:26 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:29 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:31 +0700] "GET /wp-rss.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:36 +0700] "GET /wp-plugins.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:38 +0700] "GET /wp-system.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:42 +0700] "GET /wp-title.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:47 +0700] "GET /wpindex.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:55 +0700] "GET /wso1337.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:53:57 +0700] "GET /rad.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:00 +0700] "GET /id.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:02 +0700] "GET /rename.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:09 +0700] "GET /wso2023.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:11 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:16 +0700] "GET /ey.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:22 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:24 +0700] "GET /v3.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:30 +0700] "GET /leaf.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:33 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:37 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:40 +0700] "GET /use.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:43 +0700] "GET /wp-clon.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:46 +0700] "GET /blvck.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:48 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:51 +0700] "GET /domain.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:54:52 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:04 +0700] "GET /mano.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:09 +0700] "GET /sx.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:19 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:25 +0700] "GET /1234.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:28 +0700] "GET /whmcs.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:30 +0700] "GET /db-config.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:33 +0700] "GET /gac.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:38 +0700] "GET /shelss.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:40 +0700] "GET /xzd.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:43 +0700] "GET /xzdd.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:45 +0700] "GET /wp-mailcek.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:55:49 +0700] "GET /revisi.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:06 +0700] "GET /degesaciihaxor.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:09 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:12 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:16 +0700] "GET /devil.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:22 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:28 +0700] "GET /hhh.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:31 +0700] "GET /sambernyawa.php HTTP/1.1" 301 1062 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:32 +0700] "GET /data-user.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:38 +0700] "GET /301.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:51 +0700] "GET /zec.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:56:59 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:09 +0700] "GET /sct.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:14 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:16 +0700] "GET /wp-smail.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:20 +0700] "GET /shell_lock.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:22 +0700] "GET /teamadmin.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:26 +0700] "GET /lux.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:29 +0700] "GET /sang3.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:36 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:41 +0700] "GET /pirja.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:45 +0700] "GET /olux.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:57:50 +0700] "GET /module.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:02 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:05 +0700] "GET /su.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:08 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:12 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:15 +0700] "GET /ikeh.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:18 +0700] "GET /includes.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:21 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:23 +0700] "GET /syd.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:27 +0700] "GET /fierza.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:31 +0700] "GET /green.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:35 +0700] "GET /theme-single.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:35 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:42 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:48 +0700] "GET /profile.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:51 +0700] "GET /class_appfun.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:58:58 +0700] "GET /user-edit.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:06 +0700] "GET /class-ftp-pures.php HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:09 +0700] "GET /by.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:12 +0700] "GET /cy.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:16 +0700] "GET /sql.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:19 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:24 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:32 +0700] "GET /rex.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:35 +0700] "GET /cylul.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:40 +0700] "GET /fx.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:42 +0700] "GET /fx-mini.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:47 +0700] "GET /FX.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:50 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:53 +0700] "GET /data.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:12:59:59 +0700] "GET /update.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:02 +0700] "GET /wsoshell.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:08 +0700] "GET /defaul.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:14 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:17 +0700] "GET /wp-functions.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:20 +0700] "GET /wp_fma.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:23 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:29 +0700] "GET /alfaaneh.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:34 +0700] "GET /wp_mna.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:43 +0700] "GET /wp-god.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:48 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:51 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:00:58 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:05 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:09 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:12 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:22 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:27 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:33 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:36 +0700] "GET /orange.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:44 +0700] "GET /en.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:50 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:01:53 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:01 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:06 +0700] "GET /upgrade.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:10 +0700] "GET /wg.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:13 +0700] "GET /antiheker.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:18 +0700] "GET /wp-contact.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:20 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:24 +0700] "GET /pler.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:35 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:43 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:44 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:47 +0700] "GET /bypass403.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:50 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:02:52 +0700] "GET /adm.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:00 +0700] "GET /abc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:04 +0700] "GET /wp-aespa.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:05 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:09 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:12 +0700] "GET /sym.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:16 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:22 +0700] "GET /1313.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:31 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:34 +0700] "GET /cyl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:37 +0700] "GET /r00t.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:47 +0700] "GET /idx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:52 +0700] "GET /Idx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:03:57 +0700] "GET /mari.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:03 +0700] "GET /minishell.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:12 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:16 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:22 +0700] "GET /wp-2018.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:27 +0700] "GET /wp-2017.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:31 +0700] "GET /style-js.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:33 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:37 +0700] "GET /remove.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:39 +0700] "GET /obfbyte.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:43 +0700] "GET /zzz.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:47 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:52 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:04:56 +0700] "GET /anonsec.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:00 +0700] "GET /anon.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:08 +0700] "GET /licenses.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:15 +0700] "GET /bps.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:18 +0700] "GET /library.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:21 +0700] "GET /wp-root.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:25 +0700] "GET /wp-.myluv.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:28 +0700] "GET /wp-users.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:34 +0700] "GET /wp-menu.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:38 +0700] "GET /88.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:47 +0700] "GET /bypass404.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:51 +0700] "GET /back.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:54 +0700] "GET /priv01.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:05:57 +0700] "GET /meki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:01 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:15 +0700] "GET /help.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:18 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:28 +0700] "GET /303.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:33 +0700] "GET /sample-config-options.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:35 +0700] "GET /wp-config-samsples.php HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:41 +0700] "GET /ye.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:45 +0700] "GET /clay.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:48 +0700] "GET /forbiden.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:06:53 +0700] "GET /class-wp.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:00 +0700] "GET /curme.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:08 +0700] "GET /xdoor.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:14 +0700] "GET /joy.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:17 +0700] "GET /ri.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:25 +0700] "GET /cd.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:28 +0700] "GET /on-settingssl.php HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:36 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:42 +0700] "GET /wp-del.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:48 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:07:58 +0700] "GET /makesmtp.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:13 +0700] "GET /product.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:18 +0700] "GET /stylec.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:22 +0700] "GET /ticket.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:25 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:28 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:33 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:37 +0700] "GET /401.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:42 +0700] "GET /405.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:53 +0700] "GET /shl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:08:58 +0700] "GET /scn.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:01 +0700] "GET /lowpr.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:04 +0700] "GET /63ck0.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:21 +0700] "GET /pda.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:29 +0700] "GET /danci.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:33 +0700] "GET /fse.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:37 +0700] "GET /anonym.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:40 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:45 +0700] "GET /demos.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:49 +0700] "GET /demon.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:09:56 +0700] "GET /tesla.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:00 +0700] "GET /clan.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:08 +0700] "GET /Fdbxhriw.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:14 +0700] "GET /kontoru.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:19 +0700] "GET /1111.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:22 +0700] "GET /shell4.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:33 +0700] "GET /lyda.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:40 +0700] "GET /ids.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:43 +0700] "GET /Priv.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:48 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:10:56 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:04 +0700] "GET /zz.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:09 +0700] "GET /database.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:12 +0700] "GET /dr.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:14 +0700] "GET /wp-init.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:21 +0700] "GET /blue.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:31 +0700] "GET /admin1.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:36 +0700] "GET /fast.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:43 +0700] "GET /ipt.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:47 +0700] "GET /wp-raze.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:51 +0700] "GET /foxwso.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:11:56 +0700] "GET /wp_backup.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:00 +0700] "GET /wp-one.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:07 +0700] "GET /wp-pluging.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:11 +0700] "GET /wp-mails.ph HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:18 +0700] "GET /wp-defaul.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:27 +0700] "GET /ah.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:31 +0700] "GET /m4r1ju4n4.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:34 +0700] "GET /aab.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:38 +0700] "GET /kuda.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:45 +0700] "GET /kii.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:49 +0700] "GET /dxshell.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:54 +0700] "GET /main.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:12:58 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:02 +0700] "GET /529.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:08 +0700] "GET /nshell.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:09 +0700] "GET /predator.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:15 +0700] "GET /zaco.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:32 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:45 +0700] "GET /b374k.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:53 +0700] "GET /cgi.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:13:59 +0700] "GET /owl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:09 +0700] "GET /yuuki.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:12 +0700] "GET /yuki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:15 +0700] "GET /spawn.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:20 +0700] "GET /puki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:25 +0700] "GET /well.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:30 +0700] "GET /black.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:37 +0700] "GET /fatal.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:41 +0700] "GET /con.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:45 +0700] "GET /con7.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:48 +0700] "GET /dbx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:52 +0700] "GET /dev.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:14:59 +0700] "GET /docindex.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:09 +0700] "GET /Dz.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:15 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:24 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:28 +0700] "GET /asu.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:32 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:38 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:50 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:15:55 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:02 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:05 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:09 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:13 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:17 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:21 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:25 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:30 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1079 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:33 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:37 +0700] "GET /wp-content/patior/ HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:40 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:46 +0700] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:51 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:16:59 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:17:01 +0700] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:17:06 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
167.172.66.162 - - [06/Sep/2025:13:17:15 +0700] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 1081 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
4.185.125.112 - - [06/Sep/2025:13:30:57 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:58 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:58 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:58 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:59 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:59 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:30:59 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:00 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:00 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:01 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:02 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:03 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:03 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:03 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:04 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:04 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:05 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:06 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:06 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:07 +0700] "GET /edit.php HTTP/1.1" 301 1018 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:08 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:09 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:09 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:10 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:10 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:10 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:11 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:11 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:11 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:12 +0700] "GET /css.php HTTP/1.1" 301 1017 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:13 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:14 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:15 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:15 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:15 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:16 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:16 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:16 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:17 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:17 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:20 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:21 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:21 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:22 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:22 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:22 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:23 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:23 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:23 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:24 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:24 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:25 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:25 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:26 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:26 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:26 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:27 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:27 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:27 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:28 +0700] "GET /file.php HTTP/1.1" 301 1018 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:28 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:29 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:30 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:30 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:30 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:31 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:31 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:31 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:33 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:33 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1029 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:33 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:34 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:34 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:35 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:35 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:35 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:36 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:36 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:37 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:37 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1034 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:38 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:39 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:39 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:39 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [06/Sep/2025:13:31:40 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
167.172.66.162 - - [06/Sep/2025:15:51:39 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:39 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:39 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "GET /alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "GET /alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:40 +0700] "GET /alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "GET /ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "GET /ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:44 +0700] "GET /ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:45 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:45 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:45 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:45 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "GET /assets/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "GET /assets/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "GET /assets/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:46 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "GET /assets/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "GET /assets/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:47 +0700] "GET /assets/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "GET /upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "GET /upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:49 +0700] "GET /upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "GET /upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "GET /upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:54 +0700] "GET /upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:59 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:59 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:59 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:59 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:51:59 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:00 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:00 +0700] "GET /uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:00 +0700] "GET /uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:00 +0700] "GET /uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:03 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:03 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:04 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "GET /assets/upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "GET /assets/upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:06 +0700] "GET /assets/upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:16 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:17 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:17 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:17 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:23 +0700] "GET /assets/uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:24 +0700] "GET /assets/uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:24 +0700] "GET /assets/uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:26 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:27 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "GET /wp-content/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "GET /wp-content/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:28 +0700] "GET /wp-content/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:29 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:29 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1133 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1133 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:30 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1131 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:33 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:33 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:33 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:33 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:33 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:34 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:34 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:34 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:34 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/bash.alfa HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/py.alfa HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "POST /wp-content/plugins/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "GET /wp-content/plugins/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "GET /wp-content/plugins/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:36 +0700] "GET /wp-content/plugins/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:39 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:40 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:40 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:40 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/perl.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/bash.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "POST /wp-content/themes/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "GET /wp-content/themes/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:42 +0700] "GET /wp-content/themes/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:43 +0700] "GET /wp-content/themes/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:45 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:46 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "POST /wp-content/upgrade/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "GET /wp-content/upgrade/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "GET /wp-content/upgrade/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:54 +0700] "GET /wp-content/upgrade/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:52:59 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:00 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:04 +0700] "POST /wp-content/updraft/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:04 +0700] "POST /wp-content/updraft/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "POST /wp-content/updraft/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "POST /wp-content/updraft/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "POST /wp-content/updraft/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "POST /wp-content/updraft/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "GET /wp-content/updraft/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "GET /wp-content/updraft/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:05 +0700] "GET /wp-content/updraft/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:08 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:09 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:09 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:09 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:09 +0700] "POST /wp-content/plugins/library/alfacgiapi/perl.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:09 +0700] "POST /wp-content/plugins/library/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "POST /wp-content/plugins/library/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "POST /wp-content/plugins/library/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "POST /wp-content/plugins/library/alfacgiapi/py.alfa HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "POST /wp-content/plugins/library/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "GET /wp-content/plugins/library/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "GET /wp-content/plugins/library/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:10 +0700] "GET /wp-content/plugins/library/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:18 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/bash.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/bash.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/py.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:19 +0700] "POST /wp-admin/alfacgiapi/py.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:20 +0700] "GET /wp-admin/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:20 +0700] "GET /wp-admin/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:20 +0700] "GET /wp-admin/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:30 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:35 +0700] "POST /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:35 +0700] "POST /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:35 +0700] "POST /wp-includes/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:35 +0700] "POST /wp-includes/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:36 +0700] "POST /wp-includes/alfacgiapi/py.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:36 +0700] "POST /wp-includes/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:36 +0700] "GET /wp-includes/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:36 +0700] "GET /wp-includes/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:36 +0700] "GET /wp-includes/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:39 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:39 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:39 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:40 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:41 +0700] "POST /.well-known/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:41 +0700] "POST /.well-known/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "POST /.well-known/alfacgiapi/bash.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "POST /.well-known/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "POST /.well-known/alfacgiapi/py.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "POST /.well-known/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "GET /.well-known/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "GET /.well-known/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:42 +0700] "GET /.well-known/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:45 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:45 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:46 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "POST /.well-known/acme-challenge/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "GET /.well-known/acme-challenge/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:47 +0700] "GET /.well-known/acme-challenge/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:48 +0700] "GET /.well-known/acme-challenge/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:49 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:49 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:49 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:50 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/bash.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "POST /.well-known/pki-validation/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "GET /.well-known/pki-validation/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "GET /.well-known/pki-validation/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:51 +0700] "GET /.well-known/pki-validation/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:53 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:54 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:57 +0700] "POST /.tmb/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:57 +0700] "POST /.tmb/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:57 +0700] "POST /.tmb/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:57 +0700] "POST /.tmb/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:57 +0700] "POST /.tmb/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:58 +0700] "POST /.tmb/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:58 +0700] "GET /.tmb/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:58 +0700] "GET /.tmb/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:58 +0700] "GET /.tmb/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:59 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:59 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:59 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:59 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:53:59 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:00 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:00 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:00 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:00 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:06 +0700] "POST /.quarantine/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:06 +0700] "POST /.quarantine/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "POST /.quarantine/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "POST /.quarantine/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "POST /.quarantine/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "POST /.quarantine/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "GET /.quarantine/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "GET /.quarantine/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:07 +0700] "GET /.quarantine/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:09 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:09 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:09 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:10 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:12 +0700] "POST /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:12 +0700] "POST /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:12 +0700] "POST /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:12 +0700] "POST /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:12 +0700] "POST /cgi-bin/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "POST /cgi-bin/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "GET /cgi-bin/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "GET /cgi-bin/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "GET /cgi-bin/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:13 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:14 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/perl.alfa HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "POST /images/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "GET /images/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "GET /images/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:22 +0700] "GET /images/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "POST /images/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:24 +0700] "GET /images/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:25 +0700] "GET /images/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:25 +0700] "GET /images/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:30 +0700] "POST /components/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:30 +0700] "POST /components/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:30 +0700] "POST /components/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:30 +0700] "POST /components/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:31 +0700] "POST /components/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:31 +0700] "POST /components/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:31 +0700] "GET /components/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:31 +0700] "GET /components/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:31 +0700] "GET /components/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "POST /components/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:36 +0700] "GET /components/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:37 +0700] "GET /components/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:37 +0700] "GET /components/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "POST /wordpress/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "GET /wordpress/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "GET /wordpress/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:39 +0700] "GET /wordpress/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:40 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:40 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:41 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/perl.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/perl.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/bash.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/bash.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/py.alfa HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:42 +0700] "POST /wp/alfacgiapi/py.alfa HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:43 +0700] "GET /wp/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:43 +0700] "GET /wp/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:43 +0700] "GET /wp/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:47 +0700] "POST /wp/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:47 +0700] "POST /wp/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "POST /wp/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "POST /wp/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "POST /wp/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "POST /wp/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "GET /wp/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "GET /wp/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:48 +0700] "GET /wp/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "POST /blog/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "GET /blog/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "GET /blog/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:55 +0700] "GET /blog/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:59 +0700] "POST /blog/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:59 +0700] "POST /blog/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:59 +0700] "POST /blog/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:59 +0700] "POST /blog/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:54:59 +0700] "POST /blog/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:00 +0700] "POST /blog/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:00 +0700] "GET /blog/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:00 +0700] "GET /blog/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:00 +0700] "GET /blog/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:06 +0700] "POST /new/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:06 +0700] "POST /new/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:06 +0700] "POST /new/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:06 +0700] "POST /new/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:07 +0700] "POST /new/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:07 +0700] "POST /new/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:07 +0700] "GET /new/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:07 +0700] "GET /new/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:07 +0700] "GET /new/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:11 +0700] "POST /new/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:11 +0700] "POST /new/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "POST /new/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "POST /new/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "POST /new/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "POST /new/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "GET /new/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "GET /new/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:12 +0700] "GET /new/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:14 +0700] "POST /old/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "POST /old/alfacgiapi/perl.alfa HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "POST /old/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "POST /old/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "POST /old/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "POST /old/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "GET /old/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "GET /old/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:15 +0700] "GET /old/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:21 +0700] "POST /old/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /old/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /old/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /old/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /old/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /old/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "GET /old/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "GET /old/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "GET /old/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /backup/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:22 +0700] "POST /backup/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "POST /backup/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "POST /backup/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "POST /backup/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "POST /backup/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "GET /backup/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "GET /backup/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:23 +0700] "GET /backup/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:29 +0700] "POST /backup/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:29 +0700] "POST /backup/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:29 +0700] "POST /backup/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "POST /backup/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "POST /backup/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "POST /backup/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "GET /backup/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "GET /backup/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:30 +0700] "GET /backup/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:36 +0700] "GET /un.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:37 +0700] "GET /foxx.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:39 +0700] "GET /wawe.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:42 +0700] "GET /js.php?get HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:44 +0700] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:49 +0700] "GET /wp-email.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:56 +0700] "GET /wp-booking.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:55:56 +0700] "GET /fierza.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:01 +0700] "GET /load.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:16 +0700] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 301 1047 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:22 +0700] "GET /wp-content/themes/fitnessbase/crp.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:29 +0700] "GET /alpha.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:31 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:35 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:39 +0700] "GET /manager.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:39 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:45 +0700] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:45 +0700] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 1096 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:49 +0700] "GET /lock360.php?daksldlkdsadas=1 HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:55 +0700] "GET /5.php HTTP/1.1" 301 1015 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:56:57 +0700] "GET /01.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:09 +0700] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 1087 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:15 +0700] "GET /.well-known/wp-signup.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:19 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:26 +0700] "GET /0o.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:29 +0700] "GET /ciis.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:35 +0700] "GET /zfox.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:40 +0700] "GET /zf.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:44 +0700] "GET /room.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:45 +0700] "GET /xd.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:51 +0700] "GET /adriv.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:56 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:56 +0700] "GET /tonant.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:56 +0700] "GET /b.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:57 +0700] "GET /xleet-shell.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:57:58 +0700] "GET /4mosan.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:10 +0700] "GET /cong.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:12 +0700] "GET /config.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:14 +0700] "GET /wp-key.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:20 +0700] "GET /wp-conctent.php HTTP/1.1" 301 1025 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:20 +0700] "GET /flame.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:22 +0700] "GET /wp-content/flame.php HTTP/1.1" 301 1067 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:23 +0700] "GET /block-patwp.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:26 +0700] "GET /bre.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:26 +0700] "GET /lx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:28 +0700] "GET /991176.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:36 +0700] "GET /ffAA531.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:39 +0700] "GET /wp-help.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:42 +0700] "GET /un.php?f=f HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:43 +0700] "GET /un2.php?f=f HTTP/1.1" 301 1021 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:45 +0700] "GET /wp-posts.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:46 +0700] "GET /xl.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:48 +0700] "GET /ww.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:48 +0700] "GET /testwp.php?wp=1 HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:48 +0700] "GET /kyami.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:51 +0700] "GET /wp-includes/class-wp-other.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:57 +0700] "GET /unknown.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:58 +0700] "GET /1975.phP HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:58 +0700] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:58:58 +0700] "GET /god4m.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:02 +0700] "GET /tuco.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:07 +0700] "GET /x.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:12 +0700] "GET /w.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:16 +0700] "GET /shl.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:18 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:23 +0700] "GET /info.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:24 +0700] "GET /o.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:26 +0700] "GET /shx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:30 +0700] "GET /l.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:36 +0700] "GET /hi.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:40 +0700] "GET /readme.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:40 +0700] "GET /pi.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:41 +0700] "GET /wp-content/themes/noriumportfolio/img_screen.php HTTP/1.1" 301 1095 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:44 +0700] "GET /wp-content/themes/noriumportfolio/doc.php HTTP/1.1" 301 1088 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:51 +0700] "GET /wp-content/themes/noriumportfolio/alpha.php HTTP/1.1" 301 1090 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:51 +0700] "GET /wp-content/themes/noriumportfolio/db.php?u HTTP/1.1" 301 1089 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:54 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:15:59:58 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:05 +0700] "GET /wp-content/themes/skatepark/alpha.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:13 +0700] "GET /wp-content/themes/skatepark/img_screen.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:15 +0700] "GET /wp-content/themes/skatepark/db.php?u HTTP/1.1" 301 1083 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:21 +0700] "GET /wp-content/themes/skatepark/doc.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:24 +0700] "GET /wp-content/plugins/db/mar.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:29 +0700] "GET /wp-content/themes/wp-pridmag/22x.php HTTP/1.1" 301 1083 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:37 +0700] "GET /wp-content/plugins/ndak/1.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:39 +0700] "GET /wp-content/plugins/ndak/marijuana.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:40 +0700] "GET /wp-content/themes/workart/db.php?u HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:45 +0700] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 301 1078 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:46 +0700] "GET /wp-content/plugins/cache-wordpress/wp-activates.php HTTP/1.1" 301 1098 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:46 +0700] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:47 +0700] "GET /wp-content/plugins/cekidot/readme.txt HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:48 +0700] "GET /wp-content/plugins/cekidot/mar.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:48 +0700] "GET /wp-content/themes/workart/doc.php HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:50 +0700] "GET /wp-content/themes/theme/gr.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:00:56 +0700] "GET /wp-content/themes/pridmag/init.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:03 +0700] "GET /wp-content/themes/jobart/db.php?u HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:05 +0700] "GET /wp-content/themes/jobart/doc.php HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:05 +0700] "GET /wp-content/themes/cepair/doc.php HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:07 +0700] "GET /wp-content/themes/cakiltheme/up.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:21 +0700] "GET /wp-content/themes/cakiltheme/idx.php HTTP/1.1" 301 1046 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:26 +0700] "GET /wp-content/themes/wp-pridmag/status.php HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:28 +0700] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:29 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:34 +0700] "GET /wp-content/themes/rishi/doc.php HTTP/1.1" 301 1078 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:36 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:41 +0700] "GET /wp-content/themes/rishi/db.php?u HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:48 +0700] "GET /wp-content/plugins/virr/v.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:49 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:51 +0700] "GET /wp-content/plugins/virr/uploader.php?uploader HTTP/1.1" 301 1092 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:52 +0700] "GET /wp-content/plugins/db/uploader.php?uploader HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:53 +0700] "GET /wp-content/plugins/wp-freeform/wawe.php HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:01:58 +0700] "GET /wp-content/plugins/wp-freeform/includes/loadme.php HTTP/1.1" 301 1097 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:01 +0700] "GET /wp-content/plugins/wp-freeform/style.php HTTP/1.1" 301 1087 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:07 +0700] "GET /?loadme HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:11 +0700] "GET /galekjaya.php?raimu=tgl99 HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:16 +0700] "GET /r00t.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:17 +0700] "GET /Xzd.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:17 +0700] "GET /radio.php?pass=shell HTTP/1.1" 301 1067 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:23 +0700] "GET /content.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:27 +0700] "GET /about.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:27 +0700] "GET /admin.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:31 +0700] "GET /css.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:31 +0700] "GET /doc.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:33 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:35 +0700] "GET /v.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:40 +0700] "GET /ups.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:42 +0700] "GET /up.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:44 +0700] "GET /fw.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:49 +0700] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 1071 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:53 +0700] "GET /local.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:53 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:55 +0700] "GET /1index.php?pass=shell HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:02:56 +0700] "GET /2index.php?pass=shell HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:02 +0700] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1096 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:05 +0700] "GET /wikindex.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1098 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:07 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:08 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:09 +0700] "GET /wp-admin/includes/1975.php HTTP/1.1" 301 1073 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:13 +0700] "GET /wp-backup-sql-302.php HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:16 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1034 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:17 +0700] "GET /wp-inlcudes.php?katib HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:18 +0700] "GET /wp-js.php?phpshells HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:26 +0700] "GET /wp-load.php?daksldlkdsadas=1 HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:29 +0700] "GET /sys.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:31 +0700] "GET /0.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:32 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:36 +0700] "GET /0x0.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:38 +0700] "GET /0z.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:43 +0700] "GET /1.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:44 +0700] "GET /13.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:44 +0700] "GET /1877.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:45 +0700] "GET /1975.php?CVE=2022 HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:03:50 +0700] "GET /1975.php?CVE=2021 HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:00 +0700] "GET /1975.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:04 +0700] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 1070 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:09 +0700] "GET /403.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:13 +0700] "GET /404.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:18 +0700] "GET /45.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:21 +0700] "GET /4x4.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:25 +0700] "GET /73.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:29 +0700] "GET /a.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:31 +0700] "GET /abc.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:33 +0700] "GET /al.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:34 +0700] "GET /alf.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:35 +0700] "GET /alf4.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:36 +0700] "GET /alfa-ioxi.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:36 +0700] "GET /alfa-shell-v4.php HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:37 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:41 +0700] "GET /alfakun.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:43 +0700] "GET /alfatesla.php HTTP/1.1" 301 1023 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:48 +0700] "GET /alfateslav4.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:51 +0700] "GET /alwso.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:54 +0700] "GET /anjay.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:54 +0700] "GET /anon.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:56 +0700] "GET /anons79.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:58 +0700] "GET /base.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:04:59 +0700] "GET /batm.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:00 +0700] "GET /bj.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:02 +0700] "GET /black.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:10 +0700] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:16 +0700] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:24 +0700] "GET /by.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:26 +0700] "GET /byp.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:28 +0700] "GET /bypas.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:29 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:30 +0700] "GET /byps.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:31 +0700] "GET /c.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:32 +0700] "GET /ccaef.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:33 +0700] "GET /chitoge.php HTTP/1.1" 301 1021 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:37 +0700] "GET /codeboy1877x.php HTTP/1.1" 301 1063 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:38 +0700] "GET /con.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:39 +0700] "GET /con7.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:40 +0700] "GET /con7ext.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:44 +0700] "GET /dbx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:47 +0700] "GET /defau1t.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:47 +0700] "GET /degeselih.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:48 +0700] "GET /dev.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:50 +0700] "GET /docindex.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:53 +0700] "GET /dosya.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:05:59 +0700] "GET /Dz.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:05 +0700] "GET /e.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:14 +0700] "GET /error.php?phpshells HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:16 +0700] "GET /evil.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:25 +0700] "GET /file.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:28 +0700] "GET /fox.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:28 +0700] "GET /FoxWSO-full.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:33 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:38 +0700] "GET /foxwso.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:44 +0700] "GET /gank.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:47 +0700] "GET /gank.php.PhP HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:50 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:06:59 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:02 +0700] "GET /gh.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:19 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:22 +0700] "GET /i.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:24 +0700] "GET /id.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:26 +0700] "GET /ids.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:34 +0700] "GET /idx.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:36 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:38 +0700] "GET /init.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:44 +0700] "GET /ioxi.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:52 +0700] "GET /iq.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:07:58 +0700] "GET /iqb.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:04 +0700] "GET /k.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:09 +0700] "GET /kepo.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:12 +0700] "GET /kk.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:16 +0700] "GET /kndw1.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:20 +0700] "GET /la.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:21 +0700] "GET /lnedx.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:26 +0700] "GET /lol.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:28 +0700] "GET /lolzk.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:29 +0700] "GET /m.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:35 +0700] "GET /mar.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:41 +0700] "GET /marijuana.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:45 +0700] "GET /mas.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:46 +0700] "GET /mass.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:52 +0700] "GET /mclash.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:08:58 +0700] "GET /mi.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:03 +0700] "GET /min.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:10 +0700] "GET /mini.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:21 +0700] "GET /minik.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:26 +0700] "GET /minishell.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:29 +0700] "GET /mrjn.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:31 +0700] "GET /n.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:32 +0700] "GET /new-index.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:40 +0700] "GET /ninja.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:41 +0700] "GET /ohayo.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:45 +0700] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 1040 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:48 +0700] "GET /olux.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:49 +0700] "GET /postfs.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:51 +0700] "GET /pref.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:09:57 +0700] "GET /priv.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:03 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:08 +0700] "GET /qindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:17 +0700] "GET /r.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:18 +0700] "GET /r57.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:20 +0700] "GET /rex.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:20 +0700] "GET /root.php HTTP/1.1" 301 1018 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:22 +0700] "GET /s.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:26 +0700] "GET /shell.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:26 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:27 +0700] "GET /shells.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:28 +0700] "GET /sql.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:33 +0700] "GET /srx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:35 +0700] "GET /sym.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:43 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:46 +0700] "GET /t.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:51 +0700] "GET /tes.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:54 +0700] "GET /tesla.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:10:55 +0700] "GET /teslav.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:01 +0700] "GET /test.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:07 +0700] "GET /tshop.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:11 +0700] "GET /twin.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:17 +0700] "GET /u.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:21 +0700] "GET /upload.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:27 +0700] "GET /uploader.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:29 +0700] "GET /usb.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:30 +0700] "GET /usr.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:34 +0700] "GET /utchiha.phP HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:41 +0700] "GET /v3.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:43 +0700] "GET /v4.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:50 +0700] "GET /vuln.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:11:55 +0700] "GET /w3llstore.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:03 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:06 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:09 +0700] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:12 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:15 +0700] "GET /wp-defaul.php HTTP/1.1" 301 1023 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:17 +0700] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:19 +0700] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 1071 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:22 +0700] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:26 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:31 +0700] "GET /wp-mails.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:34 +0700] "GET /wp-one.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:38 +0700] "GET /wp-pluging.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:42 +0700] "GET /wp-plugins.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:46 +0700] "GET /wp-rss.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:58 +0700] "GET /wp-singupp.php HTTP/1.1" 301 1024 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:12:59 +0700] "GET /wp-site.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:03 +0700] "GET /wp-system.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:08 +0700] "GET /wp-title.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:14 +0700] "GET /wp-we.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:14 +0700] "GET /wp.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:15 +0700] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:18 +0700] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:23 +0700] "GET /wpindex.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:26 +0700] "GET /ws.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:31 +0700] "GET /wsanon.php HTTP/1.1" 301 1020 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:37 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:44 +0700] "GET /wso.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:48 +0700] "GET /wso1.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:50 +0700] "GET /wso1337.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:51 +0700] "GET /wso2.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:54 +0700] "GET /xcv.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:57 +0700] "GET /xidcm.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:13:58 +0700] "GET /xindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:04 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:05 +0700] "GET /xm.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:08 +0700] "GET /xx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:17 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:18 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:18 +0700] "GET /y.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:22 +0700] "GET /z.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:24 +0700] "GET /zk.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:30 +0700] "GET /zone.php?phpshell HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:32 +0700] "GET /zx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:32 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:39 +0700] "GET /c99.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:42 +0700] "GET /ok.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:45 +0700] "GET /2.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:46 +0700] "GET /3.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:49 +0700] "GET /4.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:50 +0700] "GET /6.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:14:53 +0700] "GET /7.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:01 +0700] "GET /8.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:07 +0700] "GET /9.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:11 +0700] "GET /10.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:17 +0700] "GET /p.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:18 +0700] "GET /q.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:21 +0700] "GET /d.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:24 +0700] "GET /f.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:31 +0700] "GET /g.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:42 +0700] "GET /h.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:48 +0700] "GET /j.php HTTP/1.1" 301 1015 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:55 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:15:58 +0700] "GET /minimo.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:07 +0700] "GET /V3.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:08 +0700] "GET /V5.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:10 +0700] "GET /www.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:12 +0700] "GET /100.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:19 +0700] "GET /777.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:21 +0700] "GET /xox.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:24 +0700] "GET /new.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:30 +0700] "GET /wi.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:32 +0700] "GET /nee.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:33 +0700] "GET /87.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:34 +0700] "GET /haxor.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:36 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:38 +0700] "GET /bb.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:44 +0700] "GET /lf.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:46 +0700] "GET /hello.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:50 +0700] "GET /if.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:16:58 +0700] "GET /kn.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:04 +0700] "GET /3301.php HTTP/1.1" 301 1018 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:05 +0700] "GET /anone.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:10 +0700] "GET /wp-configer.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:14 +0700] "GET /wp-ad.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:16 +0700] "GET /send.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:23 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:24 +0700] "GET /sendmail.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:27 +0700] "GET /rahma.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:30 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:31 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:34 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.5"
167.172.66.162 - - [06/Sep/2025:16:17:35 +0700] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1068 "-" "python-requests/2.32.5"
167.172.66.162 - - [06/Sep/2025:16:17:38 +0700] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1064 "-" "python-requests/2.32.5"
167.172.66.162 - - [06/Sep/2025:16:17:41 +0700] "GET /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1090 "-" "python-requests/2.32.5"
167.172.66.162 - - [06/Sep/2025:16:17:42 +0700] "GET /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1080 "-" "python-requests/2.32.5"
167.172.66.162 - - [06/Sep/2025:16:17:45 +0700] "GET /assets/editor/fileman/dev.html HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:49 +0700] "GET /assets/editor/fileman/index.html HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:54 +0700] "GET /js/fileman/dev.html HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:17:57 +0700] "GET /js/fileman/index.html HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:01 +0700] "GET /fileman/index.html HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:02 +0700] "GET /fileman/dev.html HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:04 +0700] "GET /lib/fileman/index.html HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:10 +0700] "GET /lib/fileman/dev.html HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:21 +0700] "GET /admin/fileman/index.html HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
167.172.66.162 - - [06/Sep/2025:16:18:27 +0700] "GET /admin/fileman/dev.html HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
20.196.101.212 - - [06/Sep/2025:18:18:41 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:41 +0700] "GET /ss.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:41 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /wsr2.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /cfile.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /ffile.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /wp-update.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:42 +0700] "GET /aaaa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:43 +0700] "GET /cool.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:43 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:43 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:43 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:43 +0700] "GET /axx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /xpas2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /bv3.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /re.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:44 +0700] "GET /gmo.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /asd67.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:45 +0700] "GET /gold.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:46 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:46 +0700] "GET /wp-gr.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:46 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:46 +0700] "GET /co.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:46 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:47 +0700] "GET /aua.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:47 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:47 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:47 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:48 +0700] "GET /class9.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:48 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:48 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:48 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:48 +0700] "GET /witmm.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
20.196.101.212 - - [06/Sep/2025:18:18:49 +0700] "GET /lo.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12H321 Safari/600.1.4"
192.36.109.73 - - [06/Sep/2025:22:24:12 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g"
192.36.109.75 - - [06/Sep/2025:22:24:14 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g"
185.54.231.44 - - [07/Sep/2025:00:12:38 +0700] "GET /.env HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.54.231.44 - - [07/Sep/2025:00:12:38 +0700] "POST / HTTP/1.1" 301 1014 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
93.123.109.175 - - [07/Sep/2025:00:32:53 +0700] "GET /.git/config HTTP/1.1" 403 1594 "-" "Go-http-client/1.1"
52.169.137.124 - - [07/Sep/2025:00:57:46 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
81.19.209.17 - - [07/Sep/2025:06:13:36 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:36 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:36 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:37 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:38 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:38 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:38 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:38 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:13:39 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:40 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:40 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:40 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:40 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:40 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:13:41 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:42 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:42 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:42 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:42 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:42 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:43 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:43 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:43 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:43 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:13:43 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:44 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:44 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:44 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:44 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:44 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:45 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:45 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:45 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:45 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:45 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:46 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:46 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:46 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:46 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:46 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:47 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:47 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:47 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:47 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:13:47 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:48 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:48 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:48 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:48 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:48 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:49 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:49 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:49 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:49 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:13:49 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:50 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:50 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:50 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:13:50 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:50 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:13:51 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:51 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:51 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:51 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:51 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:13:52 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:52 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:52 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:52 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:52 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:53 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:53 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:53 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:53 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:53 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:54 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:54 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:54 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:54 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:54 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:55 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:55 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:55 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:13:55 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:55 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:13:56 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:56 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:56 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:56 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:13:56 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:13:57 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:57 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:57 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:57 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:57 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:58 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:13:58 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:58 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:58 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:58 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:13:59 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:59 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:13:59 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:59 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:13:59 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:00 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:00 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:00 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:00 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:00 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:01 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:14:01 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:14:01 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:01 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:01 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:02 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:02 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:02 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:02 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:02 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:03 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:03 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:03 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:03 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:03 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:04 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:04 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:04 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:04 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:04 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:14:05 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:05 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:05 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:05 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:05 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:06 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:06 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:06 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:06 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:06 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:07 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:07 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:07 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:07 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:07 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:08 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:08 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:08 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:08 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /images/class.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:09 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:10 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:10 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:10 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:10 +0700] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:11 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:11 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:11 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:11 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:11 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:12 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:12 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:12 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:12 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:13 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:14 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:14 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:14 +0700] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:14 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:15 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:16 +0700] "GET /config.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:16 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:16 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:16 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:16 +0700] "GET /edit-tags.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:17 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:17 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:17 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:17 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:17 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:18 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:18 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:18 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:18 +0700] "GET /webdb.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:18 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:19 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:20 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:20 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:20 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:20 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:20 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:21 +0700] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:21 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:21 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:21 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:21 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:22 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:23 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:23 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:23 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:23 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:24 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:25 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:25 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:25 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:25 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /sallu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:26 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:27 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:27 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:27 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:27 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:27 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:28 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:29 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:29 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:29 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:29 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:29 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:30 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:31 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:31 +0700] "GET /hehehehe.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:31 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:31 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:32 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:33 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:33 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:14:33 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:33 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:33 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:34 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:35 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:35 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:35 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:35 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /thumbs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:36 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:37 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:37 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:37 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:37 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:37 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:38 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:14:38 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:38 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:38 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:38 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:39 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:39 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:39 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:39 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:39 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:40 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:41 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:41 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:41 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:14:41 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:41 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:42 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:42 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:42 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:42 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:42 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:43 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:43 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:43 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:43 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:43 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:44 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:44 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:44 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:44 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:44 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:45 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:45 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:14:45 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:45 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:45 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:46 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:46 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:46 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:46 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:46 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:47 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:48 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:48 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:48 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:48 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:49 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:50 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:50 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:50 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:50 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:51 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:52 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:14:52 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:52 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:52 +0700] "GET /fonts/database.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /css/js1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:53 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:54 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:54 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:54 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:14:54 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:54 +0700] "GET /assets/sandi-amir.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:14:55 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:14:55 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:55 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:55 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:55 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:14:56 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:56 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:56 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:56 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:14:56 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:57 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:58 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:58 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:14:58 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:14:58 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:58 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:14:59 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:00 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:00 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:00 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:15:00 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:01 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:02 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:02 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:03 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:03 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:03 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:04 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:04 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:04 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:05 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:05 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:05 +0700] "GET /sim.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:15:06 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:06 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:06 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:06 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:07 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:08 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:08 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:08 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:08 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:08 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:09 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:09 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:09 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:09 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:09 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:10 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:10 +0700] "GET /wp-content/maw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:10 +0700] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:10 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:10 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:11 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:12 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:12 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:12 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:12 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:13 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:14 +0700] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:14 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:14 +0700] "GET /waf_defender.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:14 +0700] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:15 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:16 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:16 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:16 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:16 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:17 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:18 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:18 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:18 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:18 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:18 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:19 +0700] "GET /css/av.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:19 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:19 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:19 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:19 +0700] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:20 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:20 +0700] "GET /bk/index.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:20 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:20 +0700] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:20 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:15:21 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:21 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:21 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:21 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:21 +0700] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /assets/11.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:22 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:23 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:23 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:23 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:23 +0700] "GET /img/about.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:23 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:24 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:24 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:24 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:24 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:24 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:25 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:25 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:25 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:25 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:25 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:26 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:27 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:27 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:27 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:27 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:28 +0700] "GET /wp-content/languages/fucku.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:29 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:15:29 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:29 +0700] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:29 +0700] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:29 +0700] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:30 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:30 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:30 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:30 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:30 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:31 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:31 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:31 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:31 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:31 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:32 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:33 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:33 +0700] "GET /memberfuns.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:33 +0700] "GET /wp-comments-pos.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:33 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:33 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:34 +0700] "GET /testsend.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
81.19.209.17 - - [07/Sep/2025:06:15:34 +0700] "GET /teamx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:34 +0700] "GET /aios/firewall-rules/settings.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:34 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:34 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:35 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:35 +0700] "GET /options-reading.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:35 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:35 +0700] "GET /brutecp-3x-NETDRUG.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:35 +0700] "GET /nation.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /wh/glass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /live/i.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:36 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:37 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:37 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:37 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:37 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:38 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:39 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:39 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:39 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:39 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:39 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:40 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:40 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:40 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:40 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:40 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:41 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:41 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:41 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:41 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:41 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:42 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:42 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:42 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:42 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:42 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:43 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:43 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:43 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:43 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:43 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:44 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:45 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:45 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:45 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:45 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:45 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:46 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:46 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:46 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:46 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:46 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:47 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:47 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:47 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:47 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:47 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:48 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:48 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:48 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:48 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:48 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:49 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:49 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:49 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:15:49 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:49 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:50 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:50 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:50 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:50 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:50 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:51 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:52 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:52 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:52 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:52 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:53 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:54 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:54 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:15:54 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:54 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:55 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:15:56 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:15:56 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:56 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:56 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:15:57 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:58 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:15:58 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:58 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:58 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:15:58 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:59 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:59 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:15:59 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:15:59 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:15:59 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:16:00 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:16:00 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:16:00 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:00 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:00 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:01 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:16:02 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:02 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
81.19.209.17 - - [07/Sep/2025:06:16:02 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:02 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:02 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:03 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:03 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:16:03 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:03 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:03 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:16:04 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:04 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:04 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:04 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:16:04 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:05 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:06 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
81.19.209.17 - - [07/Sep/2025:06:16:06 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:16:06 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
81.19.209.17 - - [07/Sep/2025:06:16:06 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:07 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:07 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:07 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:07 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:07 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
81.19.209.17 - - [07/Sep/2025:06:16:08 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:08 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:08 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
81.19.209.17 - - [07/Sep/2025:06:16:08 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:09 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:09 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:16:09 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
81.19.209.17 - - [07/Sep/2025:06:16:10 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
81.19.209.17 - - [07/Sep/2025:06:16:11 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:11 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
81.19.209.17 - - [07/Sep/2025:06:16:11 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:11 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:12 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:13 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:13 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
81.19.209.17 - - [07/Sep/2025:06:16:13 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
81.19.209.17 - - [07/Sep/2025:06:16:13 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
81.19.209.17 - - [07/Sep/2025:06:16:14 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
114.10.149.112 - - [07/Sep/2025:08:24:33 +0700] "POST /xmlrpc.php HTTP/1.1" 301 1057 "-" "python-requests/2.32.5"
110.172.98.2 - - [07/Sep/2025:08:38:34 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
205.210.31.146 - - [07/Sep/2025:08:59:34 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
190.4.127.191 - - [07/Sep/2025:10:14:29 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
190.4.127.191 - - [07/Sep/2025:10:14:30 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
4.185.127.144 - - [07/Sep/2025:15:16:35 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:35 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:36 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:36 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:37 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:37 +0700] "GET /meta.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:38 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:38 +0700] "GET /randkeyword.php HTTP/1.1" 301 1062 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:39 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:39 +0700] "GET /user.php HTTP/1.1" 301 1018 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:39 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:40 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:40 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:41 +0700] "GET /cron.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:41 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:41 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:42 +0700] "GET /cookie.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:42 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:42 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:43 +0700] "GET /xleet.php HTTP/1.1" 301 1019 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:43 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:44 +0700] "GET /spip.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:44 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:45 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:45 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:45 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:46 +0700] "GET /room.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:46 +0700] "GET /disagreed.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:46 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:47 +0700] "GET /text.php HTTP/1.1" 301 1018 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:47 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1059 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:48 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:48 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:49 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:49 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:49 +0700] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 1083 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:50 +0700] "GET /feeds.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:50 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:50 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:51 +0700] "GET /system.php HTTP/1.1" 301 1020 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:51 +0700] "GET /wp-admins.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:52 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:52 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:52 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:53 +0700] "GET /xmlrpc.php0 HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:53 +0700] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 1073 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:53 +0700] "GET /colors.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:54 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:54 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:55 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:55 +0700] "GET /alfa-rex1.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:56 +0700] "GET /wp-index.php HTTP/1.1" 301 1059 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:56 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:56 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:57 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:57 +0700] "GET /alfanew.php7 HTTP/1.1" 301 1059 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:57 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:58 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:58 +0700] "GET /locale.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:59 +0700] "GET /sh.php HTTP/1.1" 301 1016 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:16:59 +0700] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 1076 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:00 +0700] "GET /wxo.php HTTP/1.1" 301 1054 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:00 +0700] "GET /colour.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:00 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:01 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:01 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:01 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:02 +0700] "GET /wp-contentt.php HTTP/1.1" 301 1062 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:02 +0700] "GET /config.php7 HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:02 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:03 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:04 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:04 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:05 +0700] "GET /block-bindings.php HTTP/1.1" 301 1065 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:05 +0700] "GET /class_api.php HTTP/1.1" 301 1060 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:05 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:06 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:06 +0700] "GET /cloud.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:06 +0700] "GET /configs.php HTTP/1.1" 301 1058 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:07 +0700] "GET /wp-configs.php HTTP/1.1" 301 1024 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:07 +0700] "GET /update.php HTTP/1.1" 301 1057 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:08 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:08 +0700] "GET /input.php HTTP/1.1" 301 1056 "-" "-"
4.185.127.144 - - [07/Sep/2025:15:17:08 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "-"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /source.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /php_site.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /passwords.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /session.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup_3.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /inetpub.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.env.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /Release.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /credentials_backup.zip HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /config.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.env HTTP/1.1" 301 1014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /init.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup1.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /setup.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cache.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /sql.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /Database HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /www.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /apikeys.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dev_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /temporary.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /lib.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /core.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /daily_backup.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /full_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /environment.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /source_code.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /configs.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /code_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /public.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /old_archive.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /output.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /test_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /administration.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /admin.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /upload.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /css.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /private.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /incremental_backup.zip HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /token.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /aws.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /weekly_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /auth.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /host.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /index.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /creds_backup.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /administrators.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /configuration_backup.zip HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /node_app.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cms.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /mailserver.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /register.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /templates.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /Archive.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /apikey.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /lambda.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /index.php.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup2.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /controllers.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /final_project.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /secret_key.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /wp.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /site.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /server.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /release_notes.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backups.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /docker_test.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /authorize.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /nest.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /email.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /code.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /exploit.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /asn.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /joomla_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /doc_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /scripts.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /conf.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /system.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /archive.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /engine.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /config_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backend.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /app.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /client.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /json.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /data.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /secrets_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /etc.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cms_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /users.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /devops.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /payloads.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /application.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /html.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /services.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /framework.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /monthly_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /s3.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /apikeys_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /web.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /root.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /auth_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dump.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /db_backup.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /base.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /credentials.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /wordpress_backup.zip HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /old.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /sessions_backup.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /wordpress.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /public_html.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /release.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.github.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /configuration.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /compressed_backup.zip HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /app_src.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /main.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /home.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /wwwroot.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /account_data.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /compliance.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dev.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /src.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /codeigniter.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /website.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /aws_secrets.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /js.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /htdocs.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /sqlite.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /project.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /routes.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env.development.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /sqllite.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /result.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /artifacts.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /test.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /instance.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /project_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /core_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /monitoring.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /db.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /api_server.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /export.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /laravel.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cloud_config.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /responses.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /build_artifacts.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dumpdata.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /authorization.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /plugin_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /prod.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /server.js.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /result_data.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /confconf.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /modules.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /compiled.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /node_site.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backend_service.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /assets.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /composer.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vuln_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /shell.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /fullstack.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /startup.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dump_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /project_src.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /payload.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.env.prod.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dependencies.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /router.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /query.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /temp.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backend_framework.zip HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /devtools.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vuln_scan.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /user_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /bundle.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /app_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /frontend_assets.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /data_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backend_old.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /site_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /web_source.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /app_data.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /archives.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vendor_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /go_server.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /drupal.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /node_modules.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /composer.json.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /boot_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /package-lock.json.zip HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /debug.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup3.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /aws_key.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /certification.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /python.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup_1.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dot_env.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /production.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /archived.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /api_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /docker_env.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /mysql.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /bucket.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vm_backup.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /api_keys.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /logs.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vendor.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /staging.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /template.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /token_data.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /golang_backend.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /aws_keys.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env.production.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /v1_backup.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /package.json.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /client_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /deploy.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /server_data.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cli.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /webapp.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /secure.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.env.development.zip HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /back_up.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /frontend_framework.zip HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /handlers.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /api_key.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /build_beta.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /tests.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /bin.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /assessment.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /smtp.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /testing.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /access_keys.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /asn_data.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /v2.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dbadmin.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /python_project.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /test_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /data_old.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /mail.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /venv.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /source_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dbdump.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vm.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /middleware.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /log.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /build_v2.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /php.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /secrets.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /functions.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env.dev.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cloud_init.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /system_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /pkg.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /mod.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /boot.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /tools.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /package.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /composer.lock.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /app_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /deps.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.env.production.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /bin_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /deployment.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /apis.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /docker.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vue_site.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dist.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /host_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /init.d.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /accounts.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /support.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env_test.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /sandbox.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /env.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /password_backup.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /magento.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /lib_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /v2_backup.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /report.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dashboard.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /vps.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /node.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /mailer.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /init_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /beta_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /exploit_db.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /admin_panel.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /smtp_config.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /plugin.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /proc.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /latest.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup_4.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup_old.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /settings_backup.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /lite.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /results.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /requests.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /integration.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dbase.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /version.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /iam.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /build_v1.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /client_data.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /development.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cms_old.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /compliance_logs.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /docker_staging.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /frontend_app.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /websites.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backend_data.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /system_config.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /bash.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /creds.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /result_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /application_src.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /authentication.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /queries.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /website_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /virtualenv.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /projects.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /exploits.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /distribution.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /pipeline.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /cmd.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /shared.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /reports.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /.git.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /os.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /react_site.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /php_backend.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /backup_final.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /old_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /src_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /build.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /git.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /internal.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /dashboard_old.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /project_source.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /laravel_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /joomla.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /email_backup.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /v1.zip HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /site-packages.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /config.js.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /settings.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /secret.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /drupal_backup.zip HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /prestashop.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /requirements.txt.zip HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /frontend.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /static.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /lib_backup.zip HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:07 +0700] "GET /site_data.zip HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /prod_backup.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /aws_credentials.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /backup4.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /ec2.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /frontend_old.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /snapshot_backup.zip HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /login.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /final.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /apps.zip HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /api.zip HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /backup_2.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /python_scripts.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /token_backup.zip HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /database.zip HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /webapps.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /symfony_backup.zip HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /config.json.zip HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /symfony.zip HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /cloud.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:08 +0700] "GET /module.zip HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
173.249.15.198 - - [07/Sep/2025:18:39:10 +0700] "GET /vault.zip HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
13.89.76.177 - - [07/Sep/2025:18:49:14 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:15 +0700] "GET /nakrip.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:15 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:16 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:17 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:17 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:17 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:20 +0700] "GET /wp-singin.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:20 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:21 +0700] "GET /shell.php HTTP/1.1" 301 1019 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:21 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:22 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:23 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:23 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:24 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:25 +0700] "GET /wp-theme.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:25 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:26 +0700] "GET /wi.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:26 +0700] "GET /php8.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:26 +0700] "GET /tes.php HTTP/1.1" 301 1017 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:27 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:28 +0700] "GET /headers.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:28 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:29 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:29 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:30 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1078 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:30 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:31 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:31 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:31 +0700] "GET /wp-content.php HTTP/1.1" 301 1024 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:32 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:35 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:36 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:37 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:38 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:38 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:39 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:39 +0700] "GET /berlin.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:39 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:40 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:41 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:42 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:42 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:42 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:44 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:44 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:44 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:45 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:46 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 1083 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:46 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:47 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:49 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:49 +0700] "GET /xpw.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:50 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:50 +0700] "GET /cah.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:52 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:52 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:54 +0700] "GET /ms-edit.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:54 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:55 +0700] "GET /send.php HTTP/1.1" 301 1018 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:56 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:57 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:58 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:58 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:59 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:49:59 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:00 +0700] "GET /wp-content/plugins/xt/php HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:00 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:00 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:01 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1043 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:02 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:03 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:03 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:04 +0700] "GET /cljntmcz.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:04 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:05 +0700] "GET /wp-links.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:05 +0700] "GET /fi2.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:05 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:06 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:06 +0700] "GET /gecko-new.php HTTP/1.1" 301 1023 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:07 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:10 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:10 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:11 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:11 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:12 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:13 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:14 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:15 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:16 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1038 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:17 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:18 +0700] "GET /wp-admin/user/index.php HTTP/1.1" 301 1070 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:20 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:21 +0700] "GET /wp-content/plugins/xt HTTP/1.1" 301 1068 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:21 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:22 +0700] "GET /wp-admin/maint/php HTTP/1.1" 301 1065 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:24 +0700] "GET /input.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:25 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:25 +0700] "GET /jquery.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:25 +0700] "GET /hehe.php HTTP/1.1" 301 1018 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:27 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:28 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:28 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:29 +0700] "GET /wp-includes/js/tinymce/plugins/compat3x/css.php HTTP/1.1" 301 1094 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:29 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:30 +0700] "GET /main.php HTTP/1.1" 301 1055 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:30 +0700] "GET /.well-known/file.php HTTP/1.1" 301 1067 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:31 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:31 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:32 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1029 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:32 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:33 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:33 +0700] "GET /ge.php HTTP/1.1" 301 1053 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:34 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:34 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:35 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:35 +0700] "GET /public/makeasmtp.php HTTP/1.1" 301 1067 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:36 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:36 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:36 +0700] "GET /system.php HTTP/1.1" 301 1020 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:37 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 1085 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:38 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:38 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:39 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:39 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:40 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:40 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:40 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:41 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:41 +0700] "GET /wp-content/uploads/2022/10/upload.php HTTP/1.1" 301 1047 "-" "-"
13.89.76.177 - - [07/Sep/2025:18:50:43 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:06 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:07 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:07 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:07 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:08 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:08 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:08 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:09 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:09 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:09 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:10 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:11 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:11 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:11 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:12 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:12 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:13 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:13 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:13 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:14 +0700] "GET /bugz.php HTTP/1.1" 301 1018 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:15 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:15 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:16 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:17 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:17 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:18 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:18 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:18 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:19 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:19 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:20 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:20 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:21 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:21 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:21 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:22 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:22 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:22 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:23 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:23 +0700] "GET /gecko.php HTTP/1.1" 301 1019 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:24 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:26 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:26 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:26 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:27 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:27 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:27 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:28 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:28 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:28 +0700] "GET /index.bak.php HTTP/1.1" 301 1023 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:29 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:29 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:30 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:30 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:30 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:31 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:32 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:32 +0700] "GET /mini HTTP/1.1" 301 1051 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:32 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:33 +0700] "GET /mm.php HTTP/1.1" 301 1016 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:35 +0700] "GET /ms-edit.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:36 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:36 +0700] "GET /options-general.php HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:37 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:38 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:38 +0700] "GET /ova.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:38 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:39 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:39 +0700] "GET /php8.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:40 +0700] "GET /pinfo.php HTTP/1.1" 301 1019 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:40 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:41 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:41 +0700] "GET /rt.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:42 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:42 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:43 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:43 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:43 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:44 +0700] "GET /test1.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:44 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1034 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:45 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:45 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:46 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:46 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:46 +0700] "GET /wp-aa.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:47 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:47 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:48 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:48 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:48 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1049 "-" "-"
4.185.125.112 - - [07/Sep/2025:21:13:49 +0700] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 1085 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:50 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:51 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:51 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:51 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:52 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:52 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:53 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:53 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:53 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:54 +0700] "GET /asasx.php HTTP/1.1" 301 1019 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:54 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:55 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:55 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:56 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:56 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:56 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:57 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:57 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:57 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:58 +0700] "GET /gecko.php HTTP/1.1" 301 1019 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:58 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:59 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:07:59 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:00 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:00 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:00 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:01 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:01 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:01 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:02 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:03 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:03 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:04 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:04 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:04 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:05 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:05 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:05 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:06 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:07 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1037 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:07 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:08 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:09 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [08/Sep/2025:00:08:09 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
185.177.72.107 - - [08/Sep/2025:00:30:20 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:20:57 +0700] "GET /test/phpinfo HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:20:57 +0700] "GET /test/_profiler/phpinfo HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
109.237.96.77 - - [08/Sep/2025:01:20:58 +0700] "GET /info.html HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:20:59 +0700] "GET /phpinfo.html HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
109.237.96.77 - - [08/Sep/2025:01:21:00 +0700] "GET /test.html HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
109.237.96.77 - - [08/Sep/2025:01:21:01 +0700] "GET /_phpinfo.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:02 +0700] "GET /pi.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:03 +0700] "GET /i.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:04 +0700] "GET /phpinfo.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:05 +0700] "GET /php_info.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:06 +0700] "GET /test.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:07 +0700] "GET /api/phpinfo.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:08 +0700] "GET /test/phpinfo.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:09 +0700] "GET /phpinfo HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:10 +0700] "GET /_profiler/phpinfo.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
109.237.96.77 - - [08/Sep/2025:01:21:11 +0700] "GET /profiler/info.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:12 +0700] "GET /phpinfo/test.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
109.237.96.77 - - [08/Sep/2025:01:21:13 +0700] "GET /.aws/credentials HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
52.187.172.191 - - [08/Sep/2025:01:58:21 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /golden.php HTTP/1.1" 301 1057 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /dejavu.php HTTP/1.1" 301 1057 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file7.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file9.php HTTP/1.1" 301 1019 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /astab.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file8.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file4.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /law.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file6.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file3.php HTTP/1.1" 301 1019 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:22 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /xmlrpcx.php HTTP/1.1" 301 1058 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /ss.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /ad.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:23 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1034 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /acp.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /faq.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /bolt.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /wp-mn.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /mek.php HTTP/1.1" 301 1017 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /lo.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /build.php HTTP/1.1" 301 1056 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /pepe.php HTTP/1.1" 301 1055 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:24 +0700] "GET /bless.php HTTP/1.1" 301 1019 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:36 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:36 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
52.187.172.191 - - [08/Sep/2025:01:58:36 +0700] "GET /dlex.php HTTP/1.1" 301 1055 "-" "-"
185.177.72.10 - - [08/Sep/2025:05:43:37 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
18.209.224.193 - - [08/Sep/2025:07:59:57 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 10; moto e(7) plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
52.231.15.86 - - [08/Sep/2025:08:40:24 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:25 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:25 +0700] "GET /nxx.php HTTP/1.1" 301 1054 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:25 +0700] "GET /claa.php HTTP/1.1" 301 1055 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:25 +0700] "GET /zc.php HTTP/1.1" 301 1053 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:26 +0700] "GET /zt2.php HTTP/1.1" 301 1054 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:26 +0700] "GET /xojryvch.php HTTP/1.1" 301 1059 "-" "-"
52.231.15.86 - - [08/Sep/2025:08:40:26 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
177.98.165.94 - - [08/Sep/2025:10:10:45 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
177.98.165.94 - - [08/Sep/2025:10:10:46 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /slo.php HTTP/1.1" 301 1054 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /nxac.php HTTP/1.1" 301 1055 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /r4f_1.php HTTP/1.1" 301 1056 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /aa17.php HTTP/1.1" 301 1055 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /testas.php HTTP/1.1" 301 1057 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:24 +0700] "GET /sarang.php HTTP/1.1" 301 1057 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:25 +0700] "GET /wp-update.php HTTP/1.1" 301 1060 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:25 +0700] "GET /public/wsr2.php HTTP/1.1" 301 1062 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:25 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1058 "-" "-"
52.187.9.159 - - [08/Sep/2025:11:50:25 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
128.199.59.176 - - [08/Sep/2025:15:52:07 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
128.199.59.176 - - [08/Sep/2025:15:52:08 +0700] "GET /favicon.ico HTTP/1.1" 301 1062 "http://www.jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
165.22.110.81 - - [08/Sep/2025:20:30:14 +0700] "GET / HTTP/1.1" 301 1047 "https://techarea.co.id//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
20.196.127.152 - - [08/Sep/2025:21:01:38 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:38 +0700] "GET /file.php?fm=true HTTP/1.1" 301 1063 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:38 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:38 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:39 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:39 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:39 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:39 +0700] "GET /phpshelldownload.com/index.php HTTP/1.1" 301 1077 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:40 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:40 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:40 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:40 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:41 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:41 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:41 +0700] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 1072 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:42 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:42 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 1081 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:42 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:42 +0700] "GET /ALFA_DATA/index.php HTTP/1.1" 301 1066 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:43 +0700] "GET /wp/pomo/pomo.php HTTP/1.1" 301 1026 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:43 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:43 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:43 +0700] "GET /wp-content/content.php HTTP/1.1" 301 1069 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:43 +0700] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 1076 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:44 +0700] "GET /uploads/bigdump.php HTTP/1.1" 301 1066 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:44 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:44 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:44 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:45 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:45 +0700] "GET /egaiska.ru/doc.php HTTP/1.1" 301 1028 "-" "-"
20.196.127.152 - - [08/Sep/2025:21:01:45 +0700] "GET /wp-admin/admin-post.php HTTP/1.1" 301 1070 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:25 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:26 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:26 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:27 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:27 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:27 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:28 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:28 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:28 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:29 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:29 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:30 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:30 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:31 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:31 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:31 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:32 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:32 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:32 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:33 +0700] "GET /bak.php HTTP/1.1" 301 1017 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:33 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:34 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:34 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:35 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:35 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:35 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:36 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:36 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:36 +0700] "GET /Public/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:37 +0700] "GET /Site/ HTTP/1.1" 301 1015 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:37 +0700] "GET /Assets/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:38 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:38 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:38 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:39 +0700] "GET /system/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:39 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:39 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:40 +0700] "GET /files/ HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:40 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:41 +0700] "GET /uploads/ HTTP/1.1" 301 1018 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:41 +0700] "GET /upload/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:42 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:42 +0700] "GET /admin/ HTTP/1.1" 301 1053 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:42 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:43 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:43 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:43 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:44 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:44 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:44 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1045 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:45 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:46 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:46 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:46 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:47 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:47 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:47 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:48 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:48 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:48 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1024 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:49 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:50 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:50 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:50 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:51 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:51 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:51 +0700] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:52 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:52 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:52 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1032 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:53 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:54 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:54 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:54 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:55 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1062 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:55 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:55 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:56 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:56 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:56 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:57 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:57 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:58 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:58 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:58 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:59 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:59 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:30:59 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:00 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:00 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:01 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:01 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:02 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:02 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:02 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:03 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:03 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:03 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:04 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:04 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1035 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:05 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:05 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:06 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:06 +0700] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:06 +0700] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 1083 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:07 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:07 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:07 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:08 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 1076 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:08 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1026 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:09 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:09 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:10 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:10 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:10 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:11 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:11 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:11 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:12 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:12 +0700] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 1046 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:12 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:13 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:13 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:14 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:14 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:14 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:15 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:15 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:15 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:16 +0700] "GET /assets/images/ HTTP/1.1" 301 1024 "-" "-"
4.185.125.112 - - [09/Sep/2025:00:31:16 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
206.168.34.91 - - [09/Sep/2025:02:31:42 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.91 - - [09/Sep/2025:02:31:50 +0700] "GET /login HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
110.172.98.2 - - [09/Sep/2025:03:01:43 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:37 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:37 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:38 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
91.246.58.169 - - [09/Sep/2025:03:51:38 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
91.246.58.169 - - [09/Sep/2025:03:51:38 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:38 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:39 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:39 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
91.246.58.169 - - [09/Sep/2025:03:51:39 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:39 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:40 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:40 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:40 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:51:40 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:41 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:41 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:41 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:41 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:42 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:42 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:42 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:42 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:43 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:43 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:43 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:43 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:44 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
91.246.58.169 - - [09/Sep/2025:03:51:44 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
91.246.58.169 - - [09/Sep/2025:03:51:44 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:44 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
91.246.58.169 - - [09/Sep/2025:03:51:45 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:45 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:45 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
91.246.58.169 - - [09/Sep/2025:03:51:45 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
91.246.58.169 - - [09/Sep/2025:03:51:46 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:51:46 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:46 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:46 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:47 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:47 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
91.246.58.169 - - [09/Sep/2025:03:51:47 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:47 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:48 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:48 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:48 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
91.246.58.169 - - [09/Sep/2025:03:51:48 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:49 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
91.246.58.169 - - [09/Sep/2025:03:51:49 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:49 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
91.246.58.169 - - [09/Sep/2025:03:51:49 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:50 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:50 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:50 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:50 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
91.246.58.169 - - [09/Sep/2025:03:51:51 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:51 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
91.246.58.169 - - [09/Sep/2025:03:51:51 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:52 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:52 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:52 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:53 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:53 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
91.246.58.169 - - [09/Sep/2025:03:51:53 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
91.246.58.169 - - [09/Sep/2025:03:51:53 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:54 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:51:54 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:54 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
91.246.58.169 - - [09/Sep/2025:03:51:54 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:51:54 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:55 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:55 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:55 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:56 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:56 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:56 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:56 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:51:56 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:57 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
91.246.58.169 - - [09/Sep/2025:03:51:57 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:57 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:58 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:58 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:58 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:58 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
91.246.58.169 - - [09/Sep/2025:03:51:59 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:59 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:59 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:59 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:51:59 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:00 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:00 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
91.246.58.169 - - [09/Sep/2025:03:52:00 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:01 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:01 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:01 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:01 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:02 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:02 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:02 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:02 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:03 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
91.246.58.169 - - [09/Sep/2025:03:52:03 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:03 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:03 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:04 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:04 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:04 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
91.246.58.169 - - [09/Sep/2025:03:52:04 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:04 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:05 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
91.246.58.169 - - [09/Sep/2025:03:52:05 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:05 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
91.246.58.169 - - [09/Sep/2025:03:52:06 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:06 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
91.246.58.169 - - [09/Sep/2025:03:52:06 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:06 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
91.246.58.169 - - [09/Sep/2025:03:52:07 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:07 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
91.246.58.169 - - [09/Sep/2025:03:52:07 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:07 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:08 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:08 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:08 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
91.246.58.169 - - [09/Sep/2025:03:52:08 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:09 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:09 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:09 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:09 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:10 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:10 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
91.246.58.169 - - [09/Sep/2025:03:52:10 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:11 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:11 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:11 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:11 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
91.246.58.169 - - [09/Sep/2025:03:52:11 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
91.246.58.169 - - [09/Sep/2025:03:52:12 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
91.246.58.169 - - [09/Sep/2025:03:52:12 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
91.246.58.169 - - [09/Sep/2025:03:52:12 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:12 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
91.246.58.169 - - [09/Sep/2025:03:52:13 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:13 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
91.246.58.169 - - [09/Sep/2025:03:52:13 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:52:28 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:28 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:52:28 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:28 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:29 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:29 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:29 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:29 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:30 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:30 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
84.17.35.114 - - [09/Sep/2025:03:52:30 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:52:31 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:31 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:31 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:31 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:52:32 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:52:32 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:32 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:32 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:52:33 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
84.17.35.114 - - [09/Sep/2025:03:52:33 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:34 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:34 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
84.17.35.114 - - [09/Sep/2025:03:52:34 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:34 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:52:35 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
84.17.35.114 - - [09/Sep/2025:03:52:35 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:35 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:36 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:36 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:36 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:52:37 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:37 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:37 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:37 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:52:38 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
84.17.35.114 - - [09/Sep/2025:03:52:38 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:52:38 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:39 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:39 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:40 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:41 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:41 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:41 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
84.17.35.114 - - [09/Sep/2025:03:52:41 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:42 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:42 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:42 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:42 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:43 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:43 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:43 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:44 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:52:44 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:44 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:44 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:52:45 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:45 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:52:45 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:45 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:46 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:46 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:52:46 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:47 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:47 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:47 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:48 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:48 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:49 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
84.17.35.114 - - [09/Sep/2025:03:52:49 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
84.17.35.114 - - [09/Sep/2025:03:52:49 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:50 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:50 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:50 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:50 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:52:51 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:51 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:51 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:51 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:52 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:52:52 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
84.17.35.114 - - [09/Sep/2025:03:52:52 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:52:53 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
84.17.35.114 - - [09/Sep/2025:03:52:53 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:53 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:54 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:52:54 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:54 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
84.17.35.114 - - [09/Sep/2025:03:52:54 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
84.17.35.114 - - [09/Sep/2025:03:52:55 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
84.17.35.114 - - [09/Sep/2025:03:52:55 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:52:56 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:52:56 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:52:56 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:56 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:57 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
84.17.35.114 - - [09/Sep/2025:03:52:57 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:57 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:58 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:58 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:58 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:59 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:52:59 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:52:59 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:52:59 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:00 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:00 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:53:00 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:53:00 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:01 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
84.17.35.114 - - [09/Sep/2025:03:53:02 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
84.17.35.114 - - [09/Sep/2025:03:53:02 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
84.17.35.114 - - [09/Sep/2025:03:53:02 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
84.17.35.114 - - [09/Sep/2025:03:53:03 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:03 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:03 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:04 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:04 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:04 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:05 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:05 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:53:05 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:06 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:53:06 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:06 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:06 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:07 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:07 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:07 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:07 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:53:08 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:08 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:08 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
84.17.35.114 - - [09/Sep/2025:03:53:09 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:53:09 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:09 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:09 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:53:10 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:10 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
84.17.35.114 - - [09/Sep/2025:03:53:10 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
84.17.35.114 - - [09/Sep/2025:03:53:11 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:11 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:11 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:53:11 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:12 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:12 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:12 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
84.17.35.114 - - [09/Sep/2025:03:53:12 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
84.17.35.114 - - [09/Sep/2025:03:53:13 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:13 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:53:14 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
84.17.35.114 - - [09/Sep/2025:03:53:14 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:14 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:14 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:15 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:15 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:53:15 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:15 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
84.17.35.114 - - [09/Sep/2025:03:53:16 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
84.17.35.114 - - [09/Sep/2025:03:53:16 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:16 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
84.17.35.114 - - [09/Sep/2025:03:53:17 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:17 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:17 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:53:17 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:18 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
84.17.35.114 - - [09/Sep/2025:03:53:18 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:18 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:18 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
84.17.35.114 - - [09/Sep/2025:03:53:19 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:53:19 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:19 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:53:20 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:20 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
84.17.35.114 - - [09/Sep/2025:03:53:20 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:20 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
84.17.35.114 - - [09/Sep/2025:03:53:21 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:21 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
84.17.35.114 - - [09/Sep/2025:03:53:21 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:21 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:22 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:22 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:22 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:23 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:23 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:23 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:24 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:24 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:24 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
84.17.35.114 - - [09/Sep/2025:03:53:24 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
13.89.203.39 - - [09/Sep/2025:06:22:28 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:29 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:29 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:30 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:30 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:31 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:31 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:32 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:32 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:32 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1047 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:33 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:34 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:34 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:35 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:35 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:36 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:36 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:36 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:37 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:37 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:38 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:39 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:39 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:40 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:40 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:40 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:41 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:41 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:42 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:42 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1023 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:43 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:44 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:44 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:44 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:45 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:45 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:46 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:46 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:46 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:47 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1030 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:48 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:48 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:49 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:49 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:50 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:50 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:50 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:51 +0700] "GET /WSOEnigma.php HTTP/1.1" 301 1060 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:51 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:52 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1041 "-" "-"
13.89.203.39 - - [09/Sep/2025:06:22:52 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
177.190.77.12 - - [09/Sep/2025:10:11:14 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
181.132.201.43 - - [09/Sep/2025:10:11:19 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
160.202.34.84 - - [09/Sep/2025:11:01:26 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.3"
160.202.34.84 - - [09/Sep/2025:11:01:35 +0700] "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.3"
160.202.34.84 - - [09/Sep/2025:11:04:27 +0700] "GET /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1067 "-" "python-requests/2.32.3"
160.202.34.84 - - [09/Sep/2025:11:04:32 +0700] "PUT /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1104 "-" "python-requests/2.32.3"
52.169.137.124 - - [09/Sep/2025:11:04:48 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:49 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:49 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:49 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:50 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:50 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:51 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:51 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:51 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:52 +0700] "GET /cong.php HTTP/1.1" 301 1018 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:52 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:53 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:53 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:54 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:54 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:54 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:55 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:55 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:55 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:56 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1037 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:56 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:57 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:57 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:58 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:58 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:58 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:59 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:04:59 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:00 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:00 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:00 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:01 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:02 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:02 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:02 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:03 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:03 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:03 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:04 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:04 +0700] "GET /wp-api.php HTTP/1.1" 301 1020 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:05 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:05 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:06 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:06 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:06 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:07 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:07 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:07 +0700] "GET /WSOEnigma.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:08 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:08 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1041 "-" "-"
52.169.137.124 - - [09/Sep/2025:11:05:09 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
160.202.34.84 - - [09/Sep/2025:11:05:30 +0700] "PUT /lib/pkp/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1072 "-" "python-requests/2.32.3"
52.165.35.173 - - [09/Sep/2025:12:33:10 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:11 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:11 +0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:12 +0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 1070 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:12 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:12 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:13 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:13 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:14 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:14 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1026 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:15 +0700] "GET /templates/beez3/error.php HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:16 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:16 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:16 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:17 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:17 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:18 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:18 +0700] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 1071 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:19 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:19 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1024 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:21 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:22 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:22 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:23 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:23 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 1078 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:23 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:24 +0700] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 1080 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:24 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:25 +0700] "GET /plugins/ HTTP/1.1" 301 1055 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:25 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1039 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:26 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:27 +0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:27 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:28 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:28 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:28 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:29 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:29 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:30 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:30 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:31 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:32 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:32 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:32 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:33 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:33 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:34 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:34 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:35 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:35 +0700] "GET /public/index.php HTTP/1.1" 301 1026 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:36 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:37 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:37 +0700] "GET /wp-content/uploads/json.php HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:37 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:38 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:38 +0700] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 1076 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:39 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:39 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:40 +0700] "GET /wp-content/style-css.php HTTP/1.1" 301 1071 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:40 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1031 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:41 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:42 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:42 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:43 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:43 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:43 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:44 +0700] "GET /wp-content/alfa.php HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:44 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:45 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:45 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:46 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:47 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1093 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:47 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:48 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:48 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 1085 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:49 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:49 +0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 1072 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:49 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:50 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 1071 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:50 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1030 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:51 +0700] "GET /wp-includes/file.php HTTP/1.1" 301 1067 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:52 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:52 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:53 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:53 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:53 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:54 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:54 +0700] "GET /aspera/faspex/ HTTP/1.1" 301 1061 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:55 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:55 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:56 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:57 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:57 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:57 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:58 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:58 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:59 +0700] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 1075 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:33:59 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:00 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:00 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1028 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:01 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 1067 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:02 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 1089 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:02 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:02 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:03 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:03 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:04 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:04 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:04 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:05 +0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 1037 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:06 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:07 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:07 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:08 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:08 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:09 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:09 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:10 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "-"
52.165.35.173 - - [09/Sep/2025:12:34:10 +0700] "GET /ccx/index.php HTTP/1.1" 301 1060 "-" "-"
35.185.189.6 - - [09/Sep/2025:15:29:48 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
20.196.101.232 - - [09/Sep/2025:17:02:18 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:18 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:18 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:19 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:19 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:20 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:20 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:20 +0700] "GET /file15.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:20 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:21 +0700] "GET /W.php HTTP/1.1" 301 1015 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:21 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:21 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:21 +0700] "GET /admin.php?p= HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:22 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:22 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:22 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:22 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:22 +0700] "GET /about.php?p= HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:23 +0700] "GET /wp-admin/maint/about.php7 HTTP/1.1" 301 1072 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:23 +0700] "GET /js.php HTTP/1.1" 301 1016 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:23 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:23 +0700] "GET /view.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:23 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:24 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:24 +0700] "GET /jlc14ng3.php HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:24 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:24 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:25 +0700] "GET /moon.php?p= HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:25 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:25 +0700] "GET /atomlib.php HTTP/1.1" 301 1021 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:25 +0700] "GET /karak.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:25 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:26 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:27 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:27 +0700] "GET /0.php HTTP/1.1" 301 1015 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:27 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:28 +0700] "GET /inputs.php?p= HTTP/1.1" 301 1060 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:28 +0700] "GET /ty.php?p= HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:29 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:29 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:29 +0700] "GET /admin836.php HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:29 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:30 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:30 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:30 +0700] "GET /mar.php HTTP/1.1" 301 1017 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:31 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:31 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:31 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:31 +0700] "GET /hugo.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:32 +0700] "GET /406.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:32 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1060 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:32 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:33 +0700] "GET /00.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:33 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:33 +0700] "GET /byp.php HTTP/1.1" 301 1017 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:33 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:33 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /asasx.php?p= HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:34 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:35 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:35 +0700] "GET /shell_wso.php7 HTTP/1.1" 301 1024 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:35 +0700] "GET /gh.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:35 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:35 +0700] "GET /ee8.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:36 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:36 +0700] "GET /success.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:36 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:36 +0700] "GET /sxo.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:37 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:37 +0700] "GET /g3.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:37 +0700] "GET /too.php HTTP/1.1" 301 1017 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:39 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:39 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:39 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:39 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:39 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /shell.php?p= HTTP/1.1" 301 1022 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:40 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:41 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:41 +0700] "GET /packed.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /ki1k.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /goods.php?id=71 HTTP/1.1" 301 1062 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:42 +0700] "GET /pd.php?id=8 HTTP/1.1" 301 1058 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:43 +0700] "GET /htaccess.php HTTP/1.1" 301 1022 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:44 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:44 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:44 +0700] "GET /yes.php HTTP/1.1" 301 1054 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:44 +0700] "GET /msg.php?id=7 HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:45 +0700] "GET /business.php HTTP/1.1" 301 1059 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:45 +0700] "GET /unesco.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:45 +0700] "GET /global.php HTTP/1.1" 301 1057 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:45 +0700] "GET /expo.php HTTP/1.1" 301 1055 "-" "-"
20.196.101.232 - - [09/Sep/2025:17:02:45 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:52 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:55 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:56 +0700] "GET /mr.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:56 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:57 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:57 +0700] "GET /pm.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:58 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:58 +0700] "GET /vxrl.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:59 +0700] "GET /shorw.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:17:59 +0700] "GET /giclass.php HTTP/1.1" 301 1021 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:01 +0700] "GET /orm.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:02 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:02 +0700] "GET /ioxi2.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:03 +0700] "GET /zcxb.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:03 +0700] "GET /wpls.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:04 +0700] "GET /testas.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:05 +0700] "GET /nope.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:05 +0700] "GET /reyha.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:06 +0700] "GET /ma1.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:06 +0700] "GET /bypltspd.php HTTP/1.1" 301 1022 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:07 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:09 +0700] "GET /wp-xm.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:09 +0700] "GET /zeal.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:10 +0700] "GET /h8h9.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:10 +0700] "GET /zasd.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:11 +0700] "GET /xzs.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:11 +0700] "GET /yep.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:12 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:12 +0700] "GET /xex.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:13 +0700] "GET /tox.php HTTP/1.1" 301 1017 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:14 +0700] "GET /racs3.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:15 +0700] "GET /wp-cliner.php HTTP/1.1" 301 1060 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:15 +0700] "GET /law.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:16 +0700] "GET /moo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:16 +0700] "GET /file4.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:17 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:17 +0700] "GET /nae.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:18 +0700] "GET /fe5.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:18 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:19 +0700] "GET /fresh3.php HTTP/1.1" 301 1020 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:20 +0700] "GET /mo.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:22 +0700] "GET /6erg.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:23 +0700] "GET /rsnu.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:23 +0700] "GET /card.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:24 +0700] "GET /aol7.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:25 +0700] "GET /admi.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:25 +0700] "GET /not.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:26 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:26 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:26 +0700] "GET /CLA.php HTTP/1.1" 301 1017 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:28 +0700] "GET /a2.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:30 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:30 +0700] "GET /89.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:31 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:32 +0700] "GET /skk.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:33 +0700] "GET /fs.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:33 +0700] "GET /nc.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:34 +0700] "GET /.an5.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:35 +0700] "GET /berm.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:35 +0700] "GET /2index.php HTTP/1.1" 301 1020 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:37 +0700] "GET /n1.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:39 +0700] "GET /pn.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:40 +0700] "GET /app.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:40 +0700] "GET /re.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:41 +0700] "GET /Eva.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:41 +0700] "GET /bq.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [09/Sep/2025:17:18:42 +0700] "GET /1a.php HTTP/1.1" 301 1053 "-" "-"
167.172.91.168 - - [09/Sep/2025:17:59:00 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:10 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:16 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:21 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:39 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:48 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:17:59:58 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:00:02 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:00:17 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:00:57 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:01:17 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:01:46 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:00 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:11 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:17 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:19 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:23 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:35 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:41 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:02:50 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:03 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:13 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:19 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:22 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:37 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:45 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:03:59 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:04:17 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:04:20 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:04:37 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:04:49 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:07 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:20 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:27 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:39 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:44 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:51 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:05:59 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:06:21 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:06:30 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:06:54 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:06:59 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:07:14 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:07:28 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:07:37 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:07:53 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:08:10 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:08:27 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:08:38 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:08:39 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:08:59 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:09:15 +0700] "GET /assets/css/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:09:32 +0700] "GET /upload/images/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:09:53 +0700] "GET /img/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:10:05 +0700] "GET /filemanager/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:10:35 +0700] "GET /storage/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:10:46 +0700] "GET /uploads/files/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:10:55 +0700] "GET /gallery/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:11:15 +0700] "GET /vendor/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:11:43 +0700] "GET /uploads/images/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:11:52 +0700] "GET /files/docs/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:12:01 +0700] "GET /config/config.kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:12:09 +0700] "GET /assets/kcfinder/src/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:12:31 +0700] "GET /data/files/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:12:49 +0700] "GET /includes/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:13:09 +0700] "GET /resources/views/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:13:29 +0700] "GET /upload/files/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:13:42 +0700] "GET /cache/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:13:53 +0700] "GET /uploads/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:02 +0700] "GET /library/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:13 +0700] "GET /system/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:16 +0700] "GET /js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:45 +0700] "GET /data/upload/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:49 +0700] "GET /tmp/cache/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:14:59 +0700] "GET /lib/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:15:11 +0700] "GET /data/file/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:15:30 +0700] "GET /js/libs/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:15:34 +0700] "GET /files/data/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:15:58 +0700] "GET /css/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:16:09 +0700] "GET /plugins/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:16:35 +0700] "GET /upload/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:17:03 +0700] "GET /site/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:17:22 +0700] "GET /assets/css/admin/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:17:41 +0700] "GET /uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:17:57 +0700] "GET /public/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:18:10 +0700] "GET /upload/uploads/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:18:21 +0700] "GET /cache/images/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:18:34 +0700] "GET /app/assets/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:18:51 +0700] "GET /assets/cms/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:19:07 +0700] "GET /uploads/uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:19:22 +0700] "GET /css/admin/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:19:32 +0700] "GET /uploads/files/files/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:19:46 +0700] "GET /upload/images/images/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
52.169.9.132 - - [09/Sep/2025:18:19:50 +0700] "GET /wp-admins.php HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:53 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:53 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:54 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:54 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:55 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:55 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:56 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:56 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:56 +0700] "GET /chosen.php HTTP/1.1" 301 1020 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:57 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:57 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:58 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:58 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:59 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:59 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:19:59 +0700] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 1076 "-" "-"
167.172.91.168 - - [09/Sep/2025:18:19:59 +0700] "GET /uploads/data/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
52.169.9.132 - - [09/Sep/2025:18:20:00 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:00 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:00 +0700] "GET /wp-admin.php HTTP/1.1" 301 1022 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:01 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:02 +0700] "GET /sh.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:02 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:02 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:03 +0700] "GET /randkeyword.php HTTP/1.1" 301 1062 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:03 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:04 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:04 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:04 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:05 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:05 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:06 +0700] "GET /cron.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:06 +0700] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 1083 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:07 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:07 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:08 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:09 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:09 +0700] "GET /configs.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:09 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:10 +0700] "GET /theme.php HTTP/1.1" 301 1019 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:11 +0700] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 1073 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:11 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:12 +0700] "GET /wp-configs.php HTTP/1.1" 301 1061 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:12 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:12 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:13 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:13 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:13 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:14 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:14 +0700] "GET /functions.php HTTP/1.1" 301 1023 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:15 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 1069 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:16 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:16 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:17 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:17 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:17 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:18 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:18 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:19 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:19 +0700] "GET /mar.php HTTP/1.1" 301 1017 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:20 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:20 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:21 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:21 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:21 +0700] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 1075 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:22 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:22 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:22 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1093 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:23 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:23 +0700] "GET /wp-content/x/index.php HTTP/1.1" 301 1032 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:24 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:25 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:25 +0700] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 1082 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:26 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:26 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:27 +0700] "GET /by.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:27 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:28 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:28 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:29 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1030 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:30 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:31 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:31 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:31 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:32 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:32 +0700] "GET /wp-index.php HTTP/1.1" 301 1059 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:32 +0700] "GET /wp-admin/license.php HTTP/1.1" 301 1067 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:33 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:33 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:33 +0700] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 1077 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:34 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:35 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:35 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:36 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:37 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:37 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:38 +0700] "GET /raf.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:39 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:40 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:40 +0700] "GET /wp-includes/css/dist/block-library/admin.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:41 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:41 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:42 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:42 +0700] "GET //classwithtostring.php HTTP/1.1" 301 1069 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:42 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:43 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:43 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:44 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
167.172.91.168 - - [09/Sep/2025:18:20:44 +0700] "GET /uploads/images/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
52.169.9.132 - - [09/Sep/2025:18:20:44 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:44 +0700] "GET /wp-admin/css/admin.php HTTP/1.1" 301 1032 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:45 +0700] "GET /xl.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:46 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:47 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:47 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:47 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:48 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:48 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:48 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:49 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:49 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1030 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:50 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:50 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:51 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:52 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:52 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:52 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:53 +0700] "GET /test.php7 HTTP/1.1" 301 1056 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:53 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:54 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:55 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1028 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:55 +0700] "GET /update.php HTTP/1.1" 301 1057 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:56 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:57 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:57 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:57 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:58 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:58 +0700] "GET /classwithtostring.phpl HTTP/1.1" 301 1069 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:58 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:59 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:20:59 +0700] "GET /ini.php HTTP/1.1" 301 1017 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:21:00 +0700] "GET /wp-admin/x.php HTTP/1.1" 301 1061 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:21:01 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 1093 "-" "-"
52.169.9.132 - - [09/Sep/2025:18:21:01 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
167.172.91.168 - - [09/Sep/2025:18:21:02 +0700] "GET /uploads/images/files/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:21:23 +0700] "GET /uploads/data/files/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:21:28 +0700] "GET /ckeditor/kcfinder/upload.phpkcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:21:50 +0700] "GET /assets/kcfinder/upload.phpckeditor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:22:05 +0700] "GET /uploads/upload/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:22:18 +0700] "GET /fileuploads/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:22:37 +0700] "GET /uploads/images/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:22:50 +0700] "GET /uploads/upload/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:01 +0700] "GET /uploads/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:14 +0700] "GET /assets/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:25 +0700] "GET /uploads/images/upload/images/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:38 +0700] "GET /uploads/images/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:49 +0700] "GET /uploads/images/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:23:58 +0700] "GET /uploads/files/upload/images/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
167.172.91.168 - - [09/Sep/2025:18:24:10 +0700] "GET /uploads/images/files/upload/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
161.35.223.55 - - [10/Sep/2025:01:23:59 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
161.35.223.55 - - [10/Sep/2025:01:24:00 +0700] "GET /favicon.ico HTTP/1.1" 301 1058 "http://jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:35 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:35 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:36 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:36 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:53:36 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:36 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:53:37 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:37 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:37 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:53:38 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:38 +0700] "GET /fai.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:38 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:53:38 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:53:39 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:53:39 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:53:39 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:53:40 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:40 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:53:40 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:53:40 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:53:41 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:53:41 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:41 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:42 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:53:42 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:42 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:42 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:43 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:53:43 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:43 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:44 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:44 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:44 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:44 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:45 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:45 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:45 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:45 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:46 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:46 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:46 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:47 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:47 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:47 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:53:47 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:53:48 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:48 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:48 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:48 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:53:49 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:49 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:50 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:53:50 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:50 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:50 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:53:51 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:51 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:53:51 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:53:51 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:53:52 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:52 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:52 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:53:53 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:53:53 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:53 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:53 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:54 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:54 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:54 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:54 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:53:55 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:55 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:53:55 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:53:56 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:56 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:53:56 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:56 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:57 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:53:57 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:57 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:53:58 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:53:58 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:53:58 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:58 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:59 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:59 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:53:59 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:53:59 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:00 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:00 +0700] "GET /function/function.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:00 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:01 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:01 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:01 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:01 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:02 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:02 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:54:02 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:54:03 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:03 +0700] "GET /default.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:03 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:04 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:04 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:04 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:04 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:54:05 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:05 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:06 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:06 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:06 +0700] "GET /mah/function.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:07 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:07 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:07 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:08 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:08 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:08 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:08 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:54:09 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:09 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:09 +0700] "GET /images/class-config.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:10 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:10 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:10 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:10 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:54:11 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:11 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:11 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:12 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:12 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:12 +0700] "GET /css/css.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:54:13 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:13 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:13 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:13 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:14 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:14 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:14 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:14 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:15 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:15 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:15 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:16 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:16 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:16 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:16 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:17 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:17 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:17 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:18 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:18 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:54:18 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:19 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:19 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:19 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:19 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:20 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:20 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:54:20 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:20 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:21 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:21 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:22 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:22 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:22 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:54:22 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:23 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:54:23 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:54:23 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:23 +0700] "GET /images/class.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:24 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:24 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:24 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:25 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:25 +0700] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:25 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:25 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:26 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:26 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:26 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:26 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:27 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:27 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:27 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:28 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:28 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:28 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:28 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:29 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:29 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:29 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:30 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:30 +0700] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:54:30 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:30 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:31 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:31 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:31 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:32 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:32 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:32 +0700] "GET /config.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:54:33 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:33 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:33 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:54:33 +0700] "GET /edit-tags.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:34 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:34 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:34 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:34 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:35 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:35 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:36 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:54:36 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:36 +0700] "GET /webdb.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:36 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:37 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:54:37 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:37 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:37 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:38 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:38 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:38 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:39 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:39 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:40 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:40 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:40 +0700] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:41 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:41 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:54:41 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:41 +0700] "GET /.tmb/bypass.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:42 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:42 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:42 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:43 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:43 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:43 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:43 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:54:44 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:44 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:44 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:45 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:45 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:45 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:54:45 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:46 +0700] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:46 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:46 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:46 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:54:47 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:47 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:48 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:48 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:48 +0700] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:48 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:49 +0700] "GET /sallu.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:49 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:49 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:49 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:50 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:50 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:50 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:51 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:51 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:51 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:51 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:52 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:54:52 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:52 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:52 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:53 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:53 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:53 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:54 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:54 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:54 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:55 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:55 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:55 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:55 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:56 +0700] "GET /hehehehe.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:56 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:56 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:57 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:57 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:57 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:54:57 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:54:58 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:58 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:54:58 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:58 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:59 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:54:59 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:54:59 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:00 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:00 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:00 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:55:01 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:01 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:55:01 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:55:01 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:02 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:02 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:02 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:03 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:03 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:03 +0700] "GET /thumbs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:03 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:55:04 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:04 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:04 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:05 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:05 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:05 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:05 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:06 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:55:06 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:06 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:06 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:07 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:07 +0700] "GET /wso.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:08 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:08 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:08 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:08 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:09 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:09 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:09 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:09 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:10 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:55:10 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:11 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:11 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:11 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:12 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:12 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:12 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:12 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:13 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:13 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:13 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:14 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:14 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:14 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:15 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:15 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:15 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:15 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:16 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:16 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:16 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:17 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:17 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:17 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:17 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:18 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:18 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:18 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:18 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:19 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:55:19 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:19 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:55:20 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:20 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:55:20 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:20 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:21 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:55:21 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:21 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:21 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:22 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:22 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:55:22 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:23 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:23 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:23 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:23 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:24 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:24 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:24 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:55:25 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:25 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:25 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:55:26 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:55:26 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:26 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:26 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:27 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:27 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:27 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:27 +0700] "GET /fonts/database.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:28 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:28 +0700] "GET /css/js1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:28 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:29 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:29 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:29 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:55:29 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:30 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:30 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:30 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:31 +0700] "GET /assets/sandi-amir.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:31 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:31 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:31 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:55:32 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:32 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:32 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:32 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:33 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:33 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:33 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:34 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:34 +0700] "GET /index1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:34 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:34 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:35 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:55:35 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:35 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:35 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:36 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:36 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:36 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:55:37 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:37 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:37 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:37 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:38 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:38 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:38 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:38 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:39 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:39 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:55:40 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:40 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:40 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:40 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:41 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:41 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:41 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:41 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:42 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:55:42 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:42 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:43 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:43 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:43 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:43 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:55:44 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:55:44 +0700] "GET /sim.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:45 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:48 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:49 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:49 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:50 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:50 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:50 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:50 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:51 +0700] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:55:51 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:51 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:52 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:52 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:52 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:55:53 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:53 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:53 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:53 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:55:54 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:54 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:54 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:55 +0700] "GET /wp-content/maw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:55 +0700] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:55 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:55:55 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:56 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:56 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:56 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:56 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:57 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:55:57 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:55:57 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:58 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:55:58 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:55:58 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:55:58 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:55:59 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:59 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:55:59 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:56:00 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:00 +0700] "GET /ahax.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:00 +0700] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:01 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:01 +0700] "GET /waf_defender.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:01 +0700] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:01 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:02 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:02 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:02 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:02 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:03 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:56:03 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:03 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:04 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:04 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:04 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:04 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:05 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:05 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:56:05 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:05 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:06 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:06 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:06 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:07 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:07 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:07 +0700] "GET /css/av.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:08 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:56:08 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:56:09 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:09 +0700] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:09 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:10 +0700] "GET /bk/index.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:10 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:10 +0700] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:10 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:56:11 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:11 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:11 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:56:11 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:12 +0700] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.47.229 - - [10/Sep/2025:02:56:12 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:13 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:13 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:13 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:13 +0700] "GET /assets/11.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:14 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:14 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:14 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:14 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:15 +0700] "GET /img/about.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:15 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:15 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:16 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:16 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:16 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.47.229 - - [10/Sep/2025:02:56:16 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:17 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:17 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:17 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.47.229 - - [10/Sep/2025:02:56:17 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:18 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:18 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:18 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:19 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:19 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:19 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:19 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:20 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:20 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:20 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:21 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:21 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:21 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:22 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:22 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:22 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:22 +0700] "GET /wp-content/languages/fucku.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.47.229 - - [10/Sep/2025:02:56:23 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:23 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:23 +0700] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:24 +0700] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:24 +0700] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:24 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:24 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:25 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:25 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:25 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:25 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:26 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:26 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:26 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:27 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:27 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:27 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:27 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:28 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:28 +0700] "GET /about/Geforce.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:28 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:28 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:29 +0700] "GET /memberfuns.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:29 +0700] "GET /wp-comments-pos.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:29 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:30 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:30 +0700] "GET /testsend.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:30 +0700] "GET /teamx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:31 +0700] "GET /aios/firewall-rules/settings.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:31 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:31 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.47.229 - - [10/Sep/2025:02:56:31 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:32 +0700] "GET /options-reading.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.47.229 - - [10/Sep/2025:02:56:32 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.47.229 - - [10/Sep/2025:02:56:32 +0700] "GET /brutecp-3x-NETDRUG.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:33 +0700] "GET /nation.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:33 +0700] "GET /wh/glass.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:33 +0700] "GET /live/i.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:34 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:34 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:34 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:34 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:35 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:35 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:35 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.47.229 - - [10/Sep/2025:02:56:36 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:36 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:36 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:36 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.47.229 - - [10/Sep/2025:02:56:37 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.47.229 - - [10/Sep/2025:02:56:37 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:37 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:37 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:38 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:38 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.47.229 - - [10/Sep/2025:02:56:38 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:39 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:39 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:39 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:39 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.47.229 - - [10/Sep/2025:02:56:40 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:40 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:40 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:41 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.47.229 - - [10/Sep/2025:02:56:41 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:41 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:42 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:42 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:42 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:42 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:43 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:43 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.47.229 - - [10/Sep/2025:02:56:43 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:44 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.47.229 - - [10/Sep/2025:02:56:44 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:45 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:45 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
92.119.16.116 - - [10/Sep/2025:02:56:45 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:45 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
92.119.16.116 - - [10/Sep/2025:02:56:45 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:46 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
92.119.16.116 - - [10/Sep/2025:02:56:46 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
92.119.16.116 - - [10/Sep/2025:02:56:46 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
92.119.16.116 - - [10/Sep/2025:02:56:47 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:47 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:47 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
92.119.16.116 - - [10/Sep/2025:02:56:47 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:48 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:48 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:48 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:48 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:49 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:49 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:49 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:49 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:50 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:50 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
92.119.16.116 - - [10/Sep/2025:02:56:50 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
92.119.16.116 - - [10/Sep/2025:02:56:50 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:51 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:56:51 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:51 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:51 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:51 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:52 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:52 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:52 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:53 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:53 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:53 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:53 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:53 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
92.119.16.116 - - [10/Sep/2025:02:56:54 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:54 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
92.119.16.116 - - [10/Sep/2025:02:56:54 +0700] "GET /home/ HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:55 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:55 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:55 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:55 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:55 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:56 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:56 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:56 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:56 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:57 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
92.119.16.116 - - [10/Sep/2025:02:56:57 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:57 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:57 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:58 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:58 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:58 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:56:58 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:58 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:59 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:56:59 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:56:59 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:00 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:00 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:00 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:00 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:00 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:01 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:01 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:01 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:01 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:57:02 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:02 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:02 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:02 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:03 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:03 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:03 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:03 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
92.119.16.116 - - [10/Sep/2025:02:57:04 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:04 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:04 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
92.119.16.116 - - [10/Sep/2025:02:57:04 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:57:05 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:57:05 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:05 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:05 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
92.119.16.116 - - [10/Sep/2025:02:57:06 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:06 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:06 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:06 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:57:07 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:07 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:07 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:07 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:07 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
92.119.16.116 - - [10/Sep/2025:02:57:08 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:08 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:08 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:08 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:09 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:09 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
92.119.16.116 - - [10/Sep/2025:02:57:09 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:09 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:10 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:10 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:10 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:10 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:11 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:11 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:11 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
92.119.16.116 - - [10/Sep/2025:02:57:11 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:12 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:12 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:12 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
92.119.16.116 - - [10/Sep/2025:02:57:12 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:13 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:13 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:13 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:13 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:13 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:14 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
92.119.16.116 - - [10/Sep/2025:02:57:14 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:14 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:15 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
92.119.16.116 - - [10/Sep/2025:02:57:15 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
92.119.16.116 - - [10/Sep/2025:02:57:15 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:15 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
92.119.16.116 - - [10/Sep/2025:02:57:15 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
92.119.16.116 - - [10/Sep/2025:02:57:16 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:16 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:16 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:17 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:17 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
92.119.16.116 - - [10/Sep/2025:02:57:17 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
92.119.16.116 - - [10/Sep/2025:02:57:17 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:18 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:18 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:18 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:18 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
92.119.16.116 - - [10/Sep/2025:02:57:18 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:19 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:19 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:19 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:20 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
92.119.16.116 - - [10/Sep/2025:02:57:20 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
92.119.16.116 - - [10/Sep/2025:02:57:20 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:20 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:21 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:21 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:21 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:22 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:22 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:22 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:22 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
92.119.16.116 - - [10/Sep/2025:02:57:23 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
92.119.16.116 - - [10/Sep/2025:02:57:23 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
92.119.16.116 - - [10/Sep/2025:02:57:23 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
92.119.16.116 - - [10/Sep/2025:02:57:23 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:52 +0700] "GET /phpinfo HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:53 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:53 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:54 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:54 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:55 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:55 +0700] "GET /php_info.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:55 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:56 +0700] "GET /pi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:56 +0700] "GET /config.phpinfo HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:57 +0700] "GET /admin/phpinfo.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:57 +0700] "GET /.aws/credentials HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:58 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:58 +0700] "GET /phpinfo2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:59 +0700] "GET /php_version.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:10:59 +0700] "GET /version.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:11:00 +0700] "GET /server-info.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:11:00 +0700] "GET /env.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [10/Sep/2025:05:11:00 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
160.202.34.84 - - [10/Sep/2025:06:17:53 +0700] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.3"
160.202.34.84 - - [10/Sep/2025:06:17:53 +0700] "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.3"
160.202.34.84 - - [10/Sep/2025:06:18:00 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.3"
160.202.34.84 - - [10/Sep/2025:06:19:48 +0700] "PUT /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1067 "-" "python-requests/2.32.3"
160.202.34.84 - - [10/Sep/2025:06:20:33 +0700] "GET /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1067 "-" "python-requests/2.32.3"
160.202.34.84 - - [10/Sep/2025:06:21:59 +0700] "GET /lib/pkp/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1072 "-" "python-requests/2.32.3"
123.160.223.72 - - [10/Sep/2025:13:51:27 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"
123.160.223.75 - - [10/Sep/2025:13:51:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:35 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:35 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:36 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:37 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:38 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:39 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.190.157 - - [10/Sep/2025:17:19:40 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
52.169.137.124 - - [11/Sep/2025:00:32:34 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:35 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:35 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:36 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:36 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:36 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:37 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:37 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:37 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:38 +0700] "GET /nc4.php HTTP/1.1" 301 1017 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:38 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:39 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:39 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:40 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:40 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:41 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:41 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:41 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:42 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:42 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1047 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:43 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:43 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:44 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:44 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:44 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:45 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:45 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:45 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:46 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:46 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:47 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:47 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:48 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:48 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:48 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:49 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:49 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:50 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:50 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:50 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1030 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:51 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:51 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:52 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:52 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:53 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:53 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:53 +0700] "GET /WSOEnigma.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:54 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:54 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
52.169.137.124 - - [11/Sep/2025:00:32:54 +0700] "GET /ini.php HTTP/1.1" 301 1017 "-" "-"
195.211.188.185 - - [11/Sep/2025:00:37:44 +0700] "GET / HTTP/1.1" 301 1047 "-" "Go-http-client/1.1"
135.220.210.134 - - [11/Sep/2025:01:50:49 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:50 +0700] "GET /wp-hoard.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:50 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:50 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:51 +0700] "GET /wp-post-editor.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:51 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:51 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:52 +0700] "GET /wp-head.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:52 +0700] "GET /admin.php HTTP/1.1" 301 1019 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:53 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:54 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:54 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:54 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:55 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:55 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:55 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:56 +0700] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 1073 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:56 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:56 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1039 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:57 +0700] "GET /1index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:57 +0700] "GET /11index.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:58 +0700] "GET /2index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:58 +0700] "GET /3index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:59 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:59 +0700] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 1091 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:50:59 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:00 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:00 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:00 +0700] "GET /stindex.php HTTP/1.1" 301 1021 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:01 +0700] "GET /alwso.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:01 +0700] "GET /ups.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:02 +0700] "GET /media-admin.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:02 +0700] "GET /sym.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:02 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:03 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:03 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:03 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:04 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:04 +0700] "GET /data.php HTTP/1.1" 301 1018 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:05 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:05 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:06 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:06 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:06 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:07 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:07 +0700] "GET /old-index.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:07 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:08 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:08 +0700] "GET /403.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:09 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:09 +0700] "GET /imagesvuln.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:10 +0700] "GET /edit-form.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:10 +0700] "GET /wikindex.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:10 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:11 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:11 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:11 +0700] "GET /new-index.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:12 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:12 +0700] "GET /wp-wso.php HTTP/1.1" 301 1020 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:13 +0700] "GET /qindex.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:13 +0700] "GET /minimo.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:14 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:14 +0700] "GET /V3.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:14 +0700] "GET /V5.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:15 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:15 +0700] "GET /www.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:15 +0700] "GET /100.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:16 +0700] "GET /777.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:16 +0700] "GET /defau1t.php HTTP/1.1" 301 1021 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:16 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:17 +0700] "GET /xox.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:17 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:18 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:18 +0700] "GET /sindex.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:18 +0700] "GET /baindex.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:19 +0700] "GET /wi.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:19 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:19 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:20 +0700] "GET /nee.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:20 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:21 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:21 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:22 +0700] "GET /c99.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:22 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:22 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:23 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:23 +0700] "GET /lol.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:23 +0700] "GET /87.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:24 +0700] "GET /7yn.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:24 +0700] "GET /haxor.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:25 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:25 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:26 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:26 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:26 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:27 +0700] "GET /u.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:27 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:27 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:28 +0700] "GET /q.php HTTP/1.1" 301 1015 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:28 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:29 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:29 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:30 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:30 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:30 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "-"
206.168.34.76 - - [11/Sep/2025:01:51:30 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
135.220.210.134 - - [11/Sep/2025:01:51:31 +0700] "GET /n.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:31 +0700] "GET /xindex.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:31 +0700] "GET /kindex.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:32 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1022 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:32 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:33 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:33 +0700] "GET /lf.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:33 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:34 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:34 +0700] "GET /hello.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:34 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:35 +0700] "GET /if.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:35 +0700] "GET /kk.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:35 +0700] "GET /mrjn.php HTTP/1.1" 301 1018 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:36 +0700] "GET /kn.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:37 +0700] "GET /3301.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:37 +0700] "GET /leaf.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:37 +0700] "GET /alex.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:38 +0700] "GET /mailer.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:38 +0700] "GET /anone.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:38 +0700] "GET /wp-configer.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:39 +0700] "GET /wp-ad.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:39 +0700] "GET /send.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:39 +0700] "GET /3.php HTTP/1.1" 301 1015 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:40 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:41 +0700] "GET /sendmail.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:41 +0700] "GET /rahma.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:41 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:42 +0700] "GET /wp-confirm.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:42 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:42 +0700] "GET /upload.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:43 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:43 +0700] "GET /wp-one.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:43 +0700] "GET /alexus.php HTTP/1.1" 301 1020 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:44 +0700] "GET /wso1337.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:45 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:45 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:45 +0700] "GET /it.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:46 +0700] "GET /kiss.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:46 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:46 +0700] "GET /wp2.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:47 +0700] "GET /owl.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:47 +0700] "GET /vuln.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:47 +0700] "GET /ohayo.php HTTP/1.1" 301 1019 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:48 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:48 +0700] "GET /cms.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:49 +0700] "GET /wp-uploads.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:49 +0700] "GET /Gel.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:49 +0700] "GET /41.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:50 +0700] "GET /4price.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:50 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:50 +0700] "GET /marijuana.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:51 +0700] "GET /.fk.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:51 +0700] "GET /XxX.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:52 +0700] "GET /alexuse.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:52 +0700] "GET /Sendemail.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:53 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:53 +0700] "GET /leafmailer2.8.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:53 +0700] "GET /olu.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:54 +0700] "GET /alexusmailer2.0.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:54 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:54 +0700] "GET /alexus-mailer.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:55 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:55 +0700] "GET /wso2.php HTTP/1.1" 301 1018 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:56 +0700] "GET /wso1.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:56 +0700] "GET /olux.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:57 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:57 +0700] "GET /xl.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:57 +0700] "GET /wp-confiig.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:58 +0700] "GET /file-manager.php HTTP/1.1" 301 1063 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:58 +0700] "GET /uploader.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:58 +0700] "GET /leafmailer.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:59 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1081 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:51:59 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:00 +0700] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:00 +0700] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1080 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:01 +0700] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:01 +0700] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1083 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:01 +0700] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 1071 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:02 +0700] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1085 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:02 +0700] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1087 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:02 +0700] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1088 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:03 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1090 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:03 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:03 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:04 +0700] "GET /date.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:04 +0700] "GET /alfaindex.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:05 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:05 +0700] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 1081 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:05 +0700] "GET /wp-content/fw.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:06 +0700] "GET /wp-content/alfa.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:06 +0700] "GET /snd.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:06 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:07 +0700] "GET /small.php HTTP/1.1" 301 1019 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:07 +0700] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 1081 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:08 +0700] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 1079 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:08 +0700] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 1096 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:09 +0700] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 1080 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:09 +0700] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 1099 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:09 +0700] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:10 +0700] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 1084 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:10 +0700] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 1093 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:10 +0700] "GET /Marvins.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:11 +0700] "GET /wp-includes/css/modules.php HTTP/1.1" 301 1037 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:11 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:12 +0700] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 1088 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:12 +0700] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 1084 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:13 +0700] "GET /wp-content/think.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:13 +0700] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:13 +0700] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 1087 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:14 +0700] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 1077 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:14 +0700] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 1083 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:14 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:15 +0700] "GET /libraries/joomla/css.php HTTP/1.1" 301 1034 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:15 +0700] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 1076 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:16 +0700] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 1075 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:16 +0700] "GET /images/vuln.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:16 +0700] "GET /tmp/vuln.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:17 +0700] "GET /rxr.php?rxr HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:17 +0700] "GET /modules/modules/modules.php HTTP/1.1" 301 1074 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:18 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:18 +0700] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 1088 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:18 +0700] "GET //wp-add-admin.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:19 +0700] "GET /RxR.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:19 +0700] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1097 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:20 +0700] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 1081 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:20 +0700] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 1090 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:20 +0700] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 1087 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:21 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 1087 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:21 +0700] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 1085 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:21 +0700] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 1085 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:22 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:22 +0700] "GET /templates/ja_purity/index.php HTTP/1.1" 301 1076 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:23 +0700] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 1043 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:23 +0700] "GET /templates/+theme+/index.php HTTP/1.1" 301 1078 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:24 +0700] "GET /templates/+theme+/error.php HTTP/1.1" 301 1078 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:24 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:24 +0700] "GET /templates/beez3/error.php HTTP/1.1" 301 1072 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:25 +0700] "GET /templates/beez5/index.php HTTP/1.1" 301 1072 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:25 +0700] "GET /templates/beez5/error.php HTTP/1.1" 301 1072 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:25 +0700] "GET /templates/beez_20/index.php HTTP/1.1" 301 1074 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:26 +0700] "GET /templates/beez_20/error.php HTTP/1.1" 301 1074 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:26 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1076 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:26 +0700] "GET /templates/protostar/error.php HTTP/1.1" 301 1039 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:27 +0700] "GET /templates/atomic/index.php HTTP/1.1" 301 1073 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:28 +0700] "GET /templates/atomic/error.php HTTP/1.1" 301 1073 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:28 +0700] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 1077 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:28 +0700] "GET /wp-content/vuln.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:29 +0700] "GET /upel.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:29 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:29 +0700] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 1089 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:30 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:30 +0700] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 1077 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:30 +0700] "GET /098.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:31 +0700] "GET /new_license.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:32 +0700] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 1093 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:32 +0700] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 1087 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:32 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:33 +0700] "GET /1975.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:33 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:33 +0700] "GET /xleet-shell.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:34 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:34 +0700] "GET /wp-includes/radio.php HTTP/1.1" 301 1068 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:34 +0700] "GET /fx.php HTTP/1.1" 301 1016 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:35 +0700] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 1074 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:35 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:36 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:36 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:36 +0700] "GET /sh.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:37 +0700] "GET /wp-includes/991176.php HTTP/1.1" 301 1069 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:37 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:37 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:38 +0700] "GET /wp-admin/x.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:38 +0700] "GET /server.php HTTP/1.1" 301 1020 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:39 +0700] "GET /wp-includes/fw.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:39 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:40 +0700] "GET /5.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:40 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:40 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:41 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:41 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:41 +0700] "GET /wp-admin/fw.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:42 +0700] "GET /mari.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:42 +0700] "GET /swm.php HTTP/1.1" 301 1017 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:43 +0700] "GET /wp-admin/radio.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:43 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:44 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:44 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:44 +0700] "GET /w3llstore.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:45 +0700] "GET /wp-content/fx.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:45 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:45 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:46 +0700] "GET /gank.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:46 +0700] "GET /style.php HTTP/1.1" 301 1019 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:47 +0700] "GET /s_e.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:47 +0700] "GET /s_ne.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:48 +0700] "GET /beence.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:48 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:48 +0700] "GET /moduless.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:49 +0700] "GET /export.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:49 +0700] "GET /legion.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:49 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:50 +0700] "GET /shells.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:50 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1039 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:50 +0700] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 1085 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:51 +0700] "GET /wp-content/db-cache.php HTTP/1.1" 301 1070 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:51 +0700] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:52 +0700] "GET /wp-includes/css/wp-config.php HTTP/1.1" 301 1076 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:52 +0700] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 1079 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:52 +0700] "GET /wp-includes/images/css.php HTTP/1.1" 301 1073 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:53 +0700] "GET /wp-includes/css/css.php HTTP/1.1" 301 1070 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:53 +0700] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 1079 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:54 +0700] "GET /wp-beckup.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:54 +0700] "GET /wp-blog-post.php HTTP/1.1" 301 1026 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:54 +0700] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:55 +0700] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 1093 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:55 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:56 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:56 +0700] "GET /7.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:56 +0700] "GET /8.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:57 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:57 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:57 +0700] "GET /wp_class_datalib.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:58 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1041 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:58 +0700] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 1084 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:59 +0700] "GET /01.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:52:59 +0700] "GET /1xleet.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:00 +0700] "GET /wp-content/shell.php HTTP/1.1" 301 1067 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:00 +0700] "GET /wp-admin/shell.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:00 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:01 +0700] "GET /4index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:01 +0700] "GET /5index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:01 +0700] "GET /6index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:02 +0700] "GET /7index.php HTTP/1.1" 301 1020 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:02 +0700] "GET /8index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:03 +0700] "GET /9index.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:03 +0700] "GET /Leaf.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:04 +0700] "GET /Uploader.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:04 +0700] "GET /wp-includes/wp-red.php HTTP/1.1" 301 1069 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:04 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:05 +0700] "GET /alfashell.php HTTP/1.1" 301 1060 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:05 +0700] "GET /am.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:05 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:06 +0700] "GET /contacts.php HTTP/1.1" 301 1022 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:06 +0700] "GET /demo328/fw.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:07 +0700] "GET /gif.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:07 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:08 +0700] "GET /images/sym.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:08 +0700] "GET /lab.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:08 +0700] "GET /leaf_mailer.php HTTP/1.1" 301 1062 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:09 +0700] "GET /leaf_php.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:09 +0700] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 1073 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:09 +0700] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 1074 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:10 +0700] "GET /mailer1.php HTTP/1.1" 301 1021 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:10 +0700] "GET /ms.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:11 +0700] "GET /rxr.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:11 +0700] "GET /srx.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:11 +0700] "GET /tuco.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:12 +0700] "GET /unix.php HTTP/1.1" 301 1055 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:12 +0700] "GET /uploads/up.php HTTP/1.1" 301 1061 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:13 +0700] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 1080 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:13 +0700] "GET /wp-admin/css/fw.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:13 +0700] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 1071 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:13 +0700] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 1031 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:14 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:15 +0700] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 1090 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:15 +0700] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 1079 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:16 +0700] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 1076 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:16 +0700] "GET /wp-content/up.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:17 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:17 +0700] "GET /wp-mna.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:17 +0700] "GET /uploads/upload.php HTTP/1.1" 301 1065 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:18 +0700] "GET /wpx.php HTTP/1.1" 301 1054 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:18 +0700] "GET /images/c99.php HTTP/1.1" 301 1024 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:18 +0700] "GET /xhell.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:19 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:19 +0700] "GET /xz.php HTTP/1.1" 301 1053 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:20 +0700] "GET /yuuki.php HTTP/1.1" 301 1056 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:20 +0700] "GET /wp-admin/shapes.php HTTP/1.1" 301 1066 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:20 +0700] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 1079 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:21 +0700] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 1078 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:21 +0700] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 1082 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:21 +0700] "GET /database.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:22 +0700] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 1063 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:22 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:23 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "-"
135.220.210.134 - - [11/Sep/2025:01:53:23 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "-" "-"
205.169.39.28 - - [11/Sep/2025:05:04:21 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:10 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:12 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:14 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:16 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:20 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:22 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:23 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:25 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:29 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:31 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:40 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:43 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:46 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:48 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:50 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:52 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:22:53 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:06 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:08 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:12 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:12 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:15 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:22 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:25 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:34 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:37 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:39 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:41 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:45 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:49 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:23:58 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:02 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:08 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:13 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:14 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:20 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:25 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:26 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:28 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:35 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:38 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:40 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:42 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:46 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:53 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:24:56 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:01 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:06 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:09 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:11 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:18 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:23 +0700] "GET /assets/css/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:35 +0700] "GET /upload/images/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:39 +0700] "GET /img/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:43 +0700] "GET /filemanager/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:47 +0700] "GET /storage/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:50 +0700] "GET /uploads/files/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:53 +0700] "GET /gallery/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:55 +0700] "GET /vendor/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:25:57 +0700] "GET /uploads/images/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:04 +0700] "GET /files/docs/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:06 +0700] "GET /config/config.kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:09 +0700] "GET /assets/kcfinder/src/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:18 +0700] "GET /data/files/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:21 +0700] "GET /includes/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:23 +0700] "GET /resources/views/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:27 +0700] "GET /upload/files/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:28 +0700] "GET /cache/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:30 +0700] "GET /uploads/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:34 +0700] "GET /library/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:39 +0700] "GET /system/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:43 +0700] "GET /js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:45 +0700] "GET /data/upload/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:46 +0700] "GET /tmp/cache/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:47 +0700] "GET /lib/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:50 +0700] "GET /data/file/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:26:55 +0700] "GET /js/libs/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:02 +0700] "GET /files/data/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:06 +0700] "GET /css/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:10 +0700] "GET /plugins/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:14 +0700] "GET /upload/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:19 +0700] "GET /site/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:23 +0700] "GET /assets/css/admin/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:27 +0700] "GET /uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:31 +0700] "GET /public/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:34 +0700] "GET /upload/uploads/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:37 +0700] "GET /cache/images/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:39 +0700] "GET /app/assets/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:50 +0700] "GET /assets/cms/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:52 +0700] "GET /uploads/uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:54 +0700] "GET /css/admin/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:27:58 +0700] "GET /uploads/files/files/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:01 +0700] "GET /upload/images/images/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:03 +0700] "GET /uploads/data/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:06 +0700] "GET /uploads/images/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:10 +0700] "GET /uploads/images/files/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:12 +0700] "GET /uploads/data/files/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:17 +0700] "GET /ckeditor/kcfinder/upload.phpkcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:20 +0700] "GET /assets/kcfinder/upload.phpckeditor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:24 +0700] "GET /uploads/upload/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:27 +0700] "GET /fileuploads/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:37 +0700] "GET /uploads/images/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:43 +0700] "GET /uploads/upload/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:50 +0700] "GET /uploads/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:52 +0700] "GET /assets/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:56 +0700] "GET /uploads/images/upload/images/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:28:59 +0700] "GET /uploads/images/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:29:00 +0700] "GET /uploads/images/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:29:02 +0700] "GET /uploads/files/upload/images/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.28 - - [11/Sep/2025:06:29:07 +0700] "GET /uploads/images/files/upload/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
203.109.32.34 - - [11/Sep/2025:10:03:51 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
203.109.32.34 - - [11/Sep/2025:10:03:52 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
206.168.34.33 - - [11/Sep/2025:10:04:18 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
103.155.166.145 - - [11/Sep/2025:15:43:47 +0700] "POST /wp-login.php/wp-login.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0"
193.37.32.211 - - [11/Sep/2025:16:10:23 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
172.190.142.176 - - [11/Sep/2025:19:12:06 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:08 +0700] "GET /SaLlu.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:09 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:10 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:11 +0700] "GET /file4.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:12 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:12 +0700] "GET /re.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:13 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:14 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:14 +0700] "GET /lc.php HTTP/1.1" 301 1016 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:15 +0700] "GET /fe5.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:17 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:17 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:18 +0700] "GET /a2.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:18 +0700] "GET /pm.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:19 +0700] "GET /nc.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:20 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:20 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:21 +0700] "GET /sec.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:22 +0700] "GET /shop.php HTTP/1.1" 301 1018 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:23 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:24 +0700] "GET /new2.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:25 +0700] "GET /new7.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:25 +0700] "GET /new14.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:26 +0700] "GET /new17.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:27 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:27 +0700] "GET /class7.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:28 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:29 +0700] "GET /file14.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:29 +0700] "GET /file17.php HTTP/1.1" 301 1020 "-" "-"
172.190.142.176 - - [11/Sep/2025:19:12:30 +0700] "GET /class9.php HTTP/1.1" 301 1057 "-" "-"
38.47.36.194 - - [11/Sep/2025:23:44:39 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
103.186.30.186 - - [12/Sep/2025:05:05:06 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "python-requests/2.27.1"
103.186.30.186 - - [12/Sep/2025:05:05:06 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1097 "-" "python-requests/2.27.1"
3.91.39.176 - - [12/Sep/2025:07:09:00 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 12; SM-N985F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
135.225.82.247 - - [12/Sep/2025:07:50:43 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
45.190.59.51 - - [12/Sep/2025:10:00:01 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
45.190.59.51 - - [12/Sep/2025:10:00:02 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
118.89.233.234 - - [12/Sep/2025:13:10:16 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
38.47.36.194 - - [12/Sep/2025:15:44:28 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
14.215.163.132 - - [12/Sep/2025:16:57:10 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
35.230.186.2 - - [12/Sep/2025:17:28:56 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
40.69.216.119 - - [12/Sep/2025:22:00:46 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:47 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:47 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:48 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:48 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:49 +0700] "GET /wp- HTTP/1.1" 301 1050 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:49 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:49 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:50 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:50 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:51 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:51 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:52 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:52 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:53 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:53 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:53 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:54 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:54 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1028 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:55 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:55 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:56 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:56 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:56 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:57 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:57 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:57 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:58 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:58 +0700] "GET /gebase.php HTTP/1.1" 301 1020 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:59 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:00:59 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:00 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:00 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:01 +0700] "GET /fi2.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:01 +0700] "GET /filemanager.php? HTTP/1.1" 301 1062 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:01 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:02 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:02 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:02 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1020 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:03 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:04 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:04 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:04 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:05 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:05 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:05 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:06 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:06 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:06 +0700] "GET /moon.php HTTP/1.1" 301 1018 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:07 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:08 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:08 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:08 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:09 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:09 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:10 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:10 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:10 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:11 +0700] "GET /403.php HTTP/1.1" 301 1017 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:11 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:12 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:12 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:13 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:13 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:13 +0700] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 1082 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:14 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:14 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:14 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:15 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1037 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:15 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:16 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1076 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:16 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:17 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:17 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:17 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:18 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:18 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:18 +0700] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 1085 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:19 +0700] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 1048 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:19 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:20 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1089 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:20 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:21 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:21 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:21 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:22 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:22 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:23 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:23 +0700] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 1051 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:23 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:24 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:25 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:25 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:25 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:26 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:26 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:26 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:27 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:27 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1038 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:28 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:28 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:29 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:29 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:29 +0700] "GET /wp-includes/404.php HTTP/1.1" 301 1066 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:30 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:30 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:30 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:31 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:31 +0700] "GET /wp-admin/ HTTP/1.1" 301 1019 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:32 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:32 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:33 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:33 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:33 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:34 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:34 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:35 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:35 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:35 +0700] "GET /wp-includes/ HTTP/1.1" 301 1022 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:36 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:37 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:37 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:37 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:38 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:38 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:39 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:39 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:39 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:40 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1037 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:40 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:41 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:41 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:42 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:42 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:42 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:43 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:43 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:43 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:44 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1038 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:44 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:45 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:45 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:46 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
40.69.216.119 - - [12/Sep/2025:22:01:46 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
129.211.215.233 - - [13/Sep/2025:00:44:40 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.44.8.254 - - [13/Sep/2025:04:28:17 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.172.98.2 - - [13/Sep/2025:08:10:38 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
36.41.75.167 - - [13/Sep/2025:08:12:35 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
103.186.30.230 - - [13/Sep/2025:08:46:15 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
187.120.22.95 - - [13/Sep/2025:09:55:03 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
187.120.22.95 - - [13/Sep/2025:09:55:04 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
60.188.57.0 - - [13/Sep/2025:12:01:07 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.190.142.176 - - [13/Sep/2025:12:48:04 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:05 +0700] "GET /pinak.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:06 +0700] "GET /mr.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:06 +0700] "GET /pm.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:07 +0700] "GET /vxrl.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:07 +0700] "GET /shorw.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:08 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:08 +0700] "GET /orm.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:09 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:09 +0700] "GET /ioxi2.php HTTP/1.1" 301 1019 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:10 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:11 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:12 +0700] "GET /H.php HTTP/1.1" 301 1052 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:12 +0700] "GET /zcxb.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:13 +0700] "GET /wpls.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:13 +0700] "GET /testas.php HTTP/1.1" 301 1057 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:14 +0700] "GET /nope.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:14 +0700] "GET /reyna.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:15 +0700] "GET /ma1.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:15 +0700] "GET /bypltspd.php HTTP/1.1" 301 1022 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:16 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:17 +0700] "GET /wp-xx.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:17 +0700] "GET /wp-xm.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:18 +0700] "GET /zeal.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:18 +0700] "GET /h8h9.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:19 +0700] "GET /zasd.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:19 +0700] "GET /xzs.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:20 +0700] "GET /yep.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:20 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:21 +0700] "GET /xex.php HTTP/1.1" 301 1017 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:21 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:22 +0700] "GET /racs3.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:23 +0700] "GET /wp-cliner.php HTTP/1.1" 301 1060 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:23 +0700] "GET /law.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:24 +0700] "GET /moo.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:24 +0700] "GET /89.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:25 +0700] "GET /noe.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:25 +0700] "GET /fe5.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:26 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:26 +0700] "GET /fresh3.php HTTP/1.1" 301 1020 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:27 +0700] "GET /mo.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:28 +0700] "GET /6erg.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:28 +0700] "GET /rsnu.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:29 +0700] "GET /card.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:29 +0700] "GET /aa17.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:30 +0700] "GET /admi.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:30 +0700] "GET /note.php HTTP/1.1" 301 1055 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:31 +0700] "GET /png.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:31 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:32 +0700] "GET /resp.php HTTP/1.1" 301 1018 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:32 +0700] "GET /algox.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:33 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:34 +0700] "GET /hb02ugyh.php HTTP/1.1" 301 1059 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:34 +0700] "GET /sxb.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:35 +0700] "GET /gm.php HTTP/1.1" 301 1053 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:35 +0700] "GET /jga.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:36 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:36 +0700] "GET /miansha.php HTTP/1.1" 301 1058 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:37 +0700] "GET /mjq.php HTTP/1.1" 301 1054 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:37 +0700] "GET /yasnu.php HTTP/1.1" 301 1019 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:38 +0700] "GET /yanki.php HTTP/1.1" 301 1056 "-" "-"
172.190.142.176 - - [13/Sep/2025:12:48:39 +0700] "GET /elf.php HTTP/1.1" 301 1054 "-" "-"
124.222.142.44 - - [13/Sep/2025:15:58:36 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.44.67.97 - - [13/Sep/2025:19:49:48 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
52.169.238.187 - - [13/Sep/2025:20:14:13 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:14 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:14 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:15 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:15 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:16 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:16 +0700] "GET /wp- HTTP/1.1" 301 1050 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:16 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:17 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:17 +0700] "GET /as.php HTTP/1.1" 301 1016 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:18 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:19 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:19 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:19 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:20 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:20 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:21 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:21 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:21 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:22 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1028 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:22 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:23 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:24 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:24 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:24 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:25 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:25 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:26 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:26 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
52.169.238.187 - - [13/Sep/2025:20:14:26 +0700] "GET /gebase.php HTTP/1.1" 301 1020 "-" "-"
162.14.210.15 - - [13/Sep/2025:23:47:17 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.40.186.63 - - [14/Sep/2025:03:31:09 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.41.76.88 - - [14/Sep/2025:03:38:16 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:17 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:17 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:17 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:17 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:17 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:18 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:18 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:18 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:18 +0700] "GET /admin.php?p= HTTP/1.1" 301 1022 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:18 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:20 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:20 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:20 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:20 +0700] "GET /about.php?p= HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:20 +0700] "GET /wp-admin/maint/about.php7 HTTP/1.1" 301 1072 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:21 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:21 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:21 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:21 +0700] "GET /admin.php HTTP/1.1" 301 1019 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:21 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /moon.php?p= HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /karak.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:22 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:23 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:23 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:23 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1034 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:23 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:23 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /inputs.php?p= HTTP/1.1" 301 1060 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /ty.php?p= HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:24 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:25 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:25 +0700] "GET /rss.php HTTP/1.1" 301 1017 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:25 +0700] "GET /cx.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:25 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:25 +0700] "GET /tinny.php?p= HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1060 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /00.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:26 +0700] "GET /byp.php HTTP/1.1" 301 1017 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:27 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:27 +0700] "GET /asasx.php?p= HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:27 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:27 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /shell_wso.php7 HTTP/1.1" 301 1061 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:28 +0700] "GET /gh.php HTTP/1.1" 301 1016 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /ee8.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /success.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:29 +0700] "GET /sxo.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:30 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:30 +0700] "GET /g3.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:30 +0700] "GET /too.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:30 +0700] "GET /NewFile.php HTTP/1.1" 301 1021 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:30 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:31 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:32 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:32 +0700] "GET /shell.php?p= HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:32 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:32 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:32 +0700] "GET /packed.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /ki1k.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /goods.php?id=71 HTTP/1.1" 301 1062 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /pd.php?id=8 HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:33 +0700] "GET /htaccess.php HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:34 +0700] "GET /classsmtps.php HTTP/1.1" 301 1024 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:34 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:34 +0700] "GET /yes.php HTTP/1.1" 301 1054 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:34 +0700] "GET /msg.php?id=7 HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:34 +0700] "GET /business.php HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /unesco.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /global.php HTTP/1.1" 301 1057 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /expo.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /klex.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:35 +0700] "GET /wp-tiroto.php HTTP/1.1" 301 1023 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:36 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:36 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1059 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:36 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:36 +0700] "GET /v3.php HTTP/1.1" 301 1053 "-" "-"
20.41.76.88 - - [14/Sep/2025:03:38:36 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
222.79.104.23 - - [14/Sep/2025:07:12:54 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
103.186.30.186 - - [14/Sep/2025:07:37:27 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
103.186.30.186 - - [14/Sep/2025:07:50:31 +0700] "GET /Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"
103.186.30.186 - - [14/Sep/2025:08:02:03 +0700] "GET /Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"
103.186.30.186 - - [14/Sep/2025:08:45:09 +0700] "GET /Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"
103.186.30.186 - - [14/Sep/2025:09:22:56 +0700] "GET /Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /goat.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /evil.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /defau1t.php HTTP/1.1" 301 1058 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /new-index.php HTTP/1.1" 301 1060 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /minipriv.php HTTP/1.1" 301 1059 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /pi.php HTTP/1.1" 301 1053 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /haxor.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /hehehehe.php HTTP/1.1" 301 1059 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /name.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /la.php HTTP/1.1" 301 1053 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /findes.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /mah.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /doc.php HTTP/1.1" 301 1017 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /cot.php HTTP/1.1" 301 1017 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /hehe.php HTTP/1.1" 301 1018 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /mrjn.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /fox.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /kct403.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /mwmek.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /shellbypass.php HTTP/1.1" 301 1062 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /luuf.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /kk.php HTTP/1.1" 301 1053 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /search.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /hello.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /cocot.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /function.php HTTP/1.1" 301 1059 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /con7ext.php HTTP/1.1" 301 1058 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /jadow.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /if.php HTTP/1.1" 301 1053 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /qindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /js.php?get HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /mahfunction.php HTTP/1.1" 301 1062 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /upel.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /mas.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /wp-inlcudes.php HTTP/1.1" 301 1062 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /sts.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /shells.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /shellsiapa.php HTTP/1.1" 301 1061 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /shx.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /srx.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /siapa.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /special.php HTTP/1.1" 301 1058 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /sunda.php HTTP/1.1" 301 1056 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /sys.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /sundaxploit.php HTTP/1.1" 301 1062 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:40 +0700] "GET /symlink403.php HTTP/1.1" 301 1061 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /testwp.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /tonant.php HTTP/1.1" 301 1057 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /tuco.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /ucp.php HTTP/1.1" 301 1054 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.199.205 - - [14/Sep/2025:09:41:41 +0700] "GET /word.php HTTP/1.1" 301 1055 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
187.49.244.37 - - [14/Sep/2025:09:56:57 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
187.49.244.37 - - [14/Sep/2025:09:56:58 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
113.141.91.58 - - [14/Sep/2025:11:01:30 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
132.232.165.4 - - [14/Sep/2025:14:58:50 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
165.232.180.8 - - [14/Sep/2025:15:51:06 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:06 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:07 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:07 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:08 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:08 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
165.232.180.8 - - [14/Sep/2025:15:51:09 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
185.248.85.42 - - [14/Sep/2025:17:49:35 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-requests/2.32.5"
182.42.111.156 - - [14/Sep/2025:18:46:08 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
162.142.125.113 - - [14/Sep/2025:19:27:25 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
52.169.141.112 - - [14/Sep/2025:19:33:57 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:33:58 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:33:59 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:00 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:00 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:01 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:01 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:02 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:02 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:03 +0700] "GET /wsa.php HTTP/1.1" 301 1017 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:04 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:05 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:05 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:06 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:06 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:07 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:07 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:08 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:08 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:09 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1040 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:10 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:11 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:11 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:12 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:12 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:13 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:13 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:14 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:14 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:15 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:16 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:17 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:17 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:18 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:18 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:19 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:19 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:20 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:20 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:21 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1037 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:22 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.141.112 - - [14/Sep/2025:19:34:23 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
40.67.245.89 - - [14/Sep/2025:20:12:01 +0700] "GET /.env HTTP/1.1" 301 1014 "-" "Java/1.6.0_13"
192.36.119.194 - - [14/Sep/2025:21:21:12 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115"
93.158.70.111 - - [14/Sep/2025:21:27:53 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115"
212.102.46.209 - - [14/Sep/2025:22:05:13 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
34.143.211.247 - - [14/Sep/2025:22:34:55 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36"
34.143.211.247 - - [14/Sep/2025:22:34:55 +0700] "GET /wordpress/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36"
20.41.85.110 - - [15/Sep/2025:01:22:40 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:40 +0700] "GET /file8.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:40 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /wp-content/plugins/lwbdene/index.php HTTP/1.1" 301 1083 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /dejavu.php HTTP/1.1" 301 1057 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:41 +0700] "GET /file.php HTTP/1.1" 301 1018 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:42 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:42 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:42 +0700] "GET /file4.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:42 +0700] "GET /file7.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /golden.php HTTP/1.1" 301 1057 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /bolt.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /wp-mn.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:43 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:44 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:44 +0700] "GET /ss.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:44 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:44 +0700] "GET /wsr2.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:44 +0700] "GET /cfile.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:45 +0700] "GET /ffile.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:45 +0700] "GET /wp-update.php HTTP/1.1" 301 1060 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:45 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:45 +0700] "GET /aaaa.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:45 +0700] "GET /cool.php HTTP/1.1" 301 1018 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /axx.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:46 +0700] "GET /xpas2.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:47 +0700] "GET /bv3.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:47 +0700] "GET /re.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:47 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:47 +0700] "GET /asd67.php HTTP/1.1" 301 1019 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:47 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:48 +0700] "GET /gold.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:48 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:48 +0700] "GET /wp-gr.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:48 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:48 +0700] "GET /co.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:49 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:49 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:49 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:49 +0700] "GET /class9.php HTTP/1.1" 301 1020 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:49 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:50 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:50 +0700] "GET /witmm.php HTTP/1.1" 301 1056 "-" "-"
20.41.85.110 - - [15/Sep/2025:01:22:50 +0700] "GET /lo.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:01:40:08 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
182.42.105.144 - - [15/Sep/2025:02:30:31 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
196.251.69.32 - - [15/Sep/2025:04:50:54 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
198.235.24.162 - - [15/Sep/2025:05:05:04 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
198.235.24.149 - - [15/Sep/2025:05:57:41 +0700] "GET / HTTP/1.1" 301 1051 "-" "-"
101.91.148.219 - - [15/Sep/2025:06:11:22 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
4.227.92.81 - - [15/Sep/2025:07:10:50 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:51 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:51 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:52 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:52 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:52 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:53 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:53 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:54 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:54 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:55 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:55 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:56 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:56 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:57 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:57 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:57 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:58 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:58 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:59 +0700] "GET /goods.php HTTP/1.1" 301 1019 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:10:59 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:00 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:01 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:01 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:01 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:02 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:02 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:03 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:03 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:03 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:04 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:05 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:05 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:05 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:06 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:06 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:07 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:07 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:07 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:08 +0700] "GET /wp-setup.php HTTP/1.1" 301 1022 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:08 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
4.227.92.81 - - [15/Sep/2025:07:11:09 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
223.244.35.77 - - [15/Sep/2025:09:59:58 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
34.124.209.199 - - [15/Sep/2025:13:39:05 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36"
34.124.209.199 - - [15/Sep/2025:13:39:05 +0700] "GET /wordpress/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36"
159.223.196.133 - - [15/Sep/2025:15:41:43 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
132.232.203.74 - - [15/Sep/2025:17:40:48 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
109.199.118.129 - - [15/Sep/2025:18:41:45 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54"
138.94.126.251 - - [15/Sep/2025:19:21:23 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
138.94.126.251 - - [15/Sep/2025:19:21:24 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
45.131.155.100 - - [15/Sep/2025:21:08:23 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36"
58.49.233.126 - - [15/Sep/2025:21:34:01 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
52.169.13.133 - - [15/Sep/2025:23:14:13 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:14 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:14 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:15 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:15 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:15 +0700] "GET /ova-wso.php HTTP/1.1" 301 1058 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:16 +0700] "GET /g1.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:16 +0700] "GET /hk.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:17 +0700] "GET /mg.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:17 +0700] "GET /blurbs.php HTTP/1.1" 301 1020 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:17 +0700] "GET /drunk.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:18 +0700] "GET /667.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:19 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:19 +0700] "GET /x0.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:19 +0700] "GET /hackfut_4927.php HTTP/1.1" 301 1063 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:20 +0700] "GET /ig4i9t.php HTTP/1.1" 301 1057 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:20 +0700] "GET /qcivq.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:20 +0700] "GET /dds.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:21 +0700] "GET /ant.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:21 +0700] "GET /y.php HTTP/1.1" 301 1015 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:22 +0700] "GET /sale.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:22 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:23 +0700] "GET /g1.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:23 +0700] "GET /mn.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:23 +0700] "GET /zzz.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:24 +0700] "GET /rtheq.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:24 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:24 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:25 +0700] "GET /uwu2.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:25 +0700] "GET /test.php HTTP/1.1" 301 1018 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:26 +0700] "GET /aiwy2a.php HTTP/1.1" 301 1057 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:26 +0700] "GET /amax.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:27 +0700] "GET /stuk4z.php HTTP/1.1" 301 1057 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:27 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:27 +0700] "GET /nope.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:28 +0700] "GET /acxx.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:28 +0700] "GET /ay.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:29 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:29 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:29 +0700] "GET /p1u.php HTTP/1.1" 301 1017 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:30 +0700] "GET /dom.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:30 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [15/Sep/2025:23:14:31 +0700] "GET /elf.php HTTP/1.1" 301 1054 "-" "-"
206.168.34.222 - - [15/Sep/2025:23:26:38 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
82.156.68.74 - - [16/Sep/2025:01:27:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.155.139.22 - - [16/Sep/2025:05:11:32 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
50.17.171.23 - - [16/Sep/2025:08:30:47 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 5 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Mobile Safari/537.36"
182.42.104.32 - - [16/Sep/2025:08:56:33 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
40.69.93.192 - - [16/Sep/2025:10:39:38 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:39 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:39 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:40 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:40 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:41 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:41 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:41 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:42 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:42 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
40.69.93.192 - - [16/Sep/2025:10:39:43 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
194.233.65.157 - - [16/Sep/2025:11:54:59 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "python-requests/2.32.4"
194.233.65.157 - - [16/Sep/2025:11:54:59 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.4"
194.233.65.157 - - [16/Sep/2025:11:55:00 +0700] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1090 "-" "python-requests/2.32.4"
194.233.65.157 - - [16/Sep/2025:11:55:01 +0700] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1090 "-" "python-requests/2.32.4"
178.233.116.138 - - [16/Sep/2025:12:17:25 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
178.233.116.138 - - [16/Sep/2025:12:17:25 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
49.7.227.204 - - [16/Sep/2025:12:48:18 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
198.235.24.64 - - [16/Sep/2025:14:11:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
199.244.88.224 - - [16/Sep/2025:20:10:14 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
36.41.75.167 - - [16/Sep/2025:20:42:17 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
146.190.101.194 - - [16/Sep/2025:21:50:55 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:02 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:18 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:20 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:23 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:25 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:51 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:51:57 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:52:01 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:52:24 +0700] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:52:26 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:52:41 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:52:59 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [16/Sep/2025:21:53:05 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
130.89.144.169 - - [16/Sep/2025:23:07:16 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)"
130.89.144.169 - - [16/Sep/2025:23:07:18 +0700] "GET / HTTP/1.1" 301 1010 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)"
162.142.125.203 - - [16/Sep/2025:23:17:43 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
52.178.193.251 - - [16/Sep/2025:23:18:27 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:28 +0700] "GET /vanta.php HTTP/1.1" 301 1056 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:28 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:28 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:29 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:29 +0700] "GET /ova-wso.php HTTP/1.1" 301 1058 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:30 +0700] "GET /g1.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:30 +0700] "GET /hk.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:30 +0700] "GET /mg.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:31 +0700] "GET /sad821.php HTTP/1.1" 301 1020 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:31 +0700] "GET /sad8rd1.php HTTP/1.1" 301 1058 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:32 +0700] "GET /blurbs.php HTTP/1.1" 301 1057 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:32 +0700] "GET /drunk.php HTTP/1.1" 301 1056 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:33 +0700] "GET /667.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:33 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:33 +0700] "GET /x0.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:34 +0700] "GET /hackfut_4927.php HTTP/1.1" 301 1063 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:34 +0700] "GET /ig4i9t.php HTTP/1.1" 301 1057 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:34 +0700] "GET /qcivq.php HTTP/1.1" 301 1056 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:35 +0700] "GET /dds.php HTTP/1.1" 301 1017 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:35 +0700] "GET /ant.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:36 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:36 +0700] "GET /sale.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:37 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:37 +0700] "GET /g1.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:37 +0700] "GET /mn.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:38 +0700] "GET /zzz.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:38 +0700] "GET /rtheq.php HTTP/1.1" 301 1056 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:39 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:39 +0700] "GET /files.php HTTP/1.1" 301 1019 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:40 +0700] "GET /uwu2.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:40 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:41 +0700] "GET /aiwy2a.php HTTP/1.1" 301 1057 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:41 +0700] "GET /amax.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:41 +0700] "GET /stuk4z.php HTTP/1.1" 301 1057 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:42 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:42 +0700] "GET /nope.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:42 +0700] "GET /acxx.php HTTP/1.1" 301 1055 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:43 +0700] "GET /ay.php HTTP/1.1" 301 1053 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:43 +0700] "GET /a.php HTTP/1.1" 301 1015 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:44 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:44 +0700] "GET /p1u.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:45 +0700] "GET /dom.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:45 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
52.178.193.251 - - [16/Sep/2025:23:18:46 +0700] "GET /elf.php HTTP/1.1" 301 1054 "-" "-"
180.110.203.108 - - [17/Sep/2025:04:24:15 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
124.221.245.78 - - [17/Sep/2025:08:10:28 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
40.69.93.192 - - [17/Sep/2025:10:55:53 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:54 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:54 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:55 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:55 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:55 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:56 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:56 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:57 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:57 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:58 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:58 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:59 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:55:59 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:00 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:00 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:00 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:01 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:01 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:01 +0700] "GET /goods.php HTTP/1.1" 301 1019 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:02 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:03 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:03 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:03 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:04 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:04 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:04 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:05 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:05 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:05 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:06 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:07 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:07 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:07 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:08 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:08 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:08 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:09 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:09 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:10 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1034 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:10 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:11 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:11 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:12 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:12 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:12 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:13 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:13 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:13 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:14 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:14 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:15 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
40.69.93.192 - - [17/Sep/2025:10:56:15 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
117.62.235.53 - - [17/Sep/2025:15:33:06 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
162.142.125.42 - - [17/Sep/2025:19:25:24 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
49.232.151.112 - - [17/Sep/2025:19:32:18 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
181.199.44.236 - - [17/Sep/2025:19:45:12 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
181.199.44.236 - - [17/Sep/2025:19:45:13 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
20.240.88.181 - - [17/Sep/2025:22:58:14 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:15 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:16 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:16 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:16 +0700] "GET /wp- HTTP/1.1" 301 1050 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:17 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:17 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:17 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:18 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:18 +0700] "GET /chosen.php HTTP/1.1" 301 1020 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:19 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:20 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:20 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:20 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:21 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:21 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:21 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:22 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:22 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:23 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:23 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:24 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:24 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:25 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:25 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:26 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:26 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:26 +0700] "GET /gebase.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:27 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:27 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:28 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:28 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:29 +0700] "GET /fi2.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:29 +0700] "GET /filemanager.php? HTTP/1.1" 301 1062 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:30 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:30 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:30 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:31 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:31 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:31 +0700] "GET /jp.php HTTP/1.1" 301 1016 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:32 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:33 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:33 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:34 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:34 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:34 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:35 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:35 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:35 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:36 +0700] "GET /NewFile.php HTTP/1.1" 301 1021 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:36 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:37 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:38 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:38 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:38 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:39 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:39 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:39 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:40 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:40 +0700] "GET /y.php HTTP/1.1" 301 1015 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:41 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:42 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:42 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:43 +0700] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 1082 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:43 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:43 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:44 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:44 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:44 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:45 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1039 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:45 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:46 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:47 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:47 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:48 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:48 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:48 +0700] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:49 +0700] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:49 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:49 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:50 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:51 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:51 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:52 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:52 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:53 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:53 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:53 +0700] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 1088 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:54 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:54 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1038 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:55 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:55 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:56 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:56 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:57 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:57 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:57 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:58 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:58 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:58 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1038 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:58:59 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:00 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:00 +0700] "GET /wp-includes/404.php HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:01 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:01 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:02 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:02 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:02 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:03 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:03 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1040 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:04 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:04 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:05 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:05 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:06 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:06 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:06 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:07 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:07 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:07 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1026 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:08 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:09 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:09 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:10 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:10 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:10 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:11 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:11 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:12 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:12 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1026 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:12 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:13 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:14 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:14 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:14 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:15 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:15 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:16 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:16 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:16 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1041 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:17 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:18 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [17/Sep/2025:22:59:18 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
185.54.231.27 - - [17/Sep/2025:23:02:48 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.54.231.27 - - [17/Sep/2025:23:02:48 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
14.215.163.132 - - [17/Sep/2025:23:34:24 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.44.67.97 - - [18/Sep/2025:03:26:09 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
223.15.245.170 - - [18/Sep/2025:07:12:28 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
1.4.206.40 - - [18/Sep/2025:11:44:15 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
1.4.206.40 - - [18/Sep/2025:11:44:16 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
167.71.175.215 - - [18/Sep/2025:12:34:26 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
167.71.175.215 - - [18/Sep/2025:12:34:27 +0700] "GET /favicon.ico HTTP/1.1" 301 1058 "http://jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
139.59.76.180 - - [18/Sep/2025:14:18:14 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [18/Sep/2025:14:18:20 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [18/Sep/2025:14:18:26 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [18/Sep/2025:14:19:07 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [18/Sep/2025:14:19:15 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
60.188.57.0 - - [18/Sep/2025:15:10:26 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
36.41.75.167 - - [18/Sep/2025:19:09:03 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
205.169.39.22 - - [18/Sep/2025:20:06:36 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
51.81.207.12 - - [18/Sep/2025:20:22:20 +0700] "GET / HTTP/1.1" 301 1051 "https://www.google.co.in" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
191.96.103.90 - - [18/Sep/2025:23:19:03 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
20.171.115.165 - - [19/Sep/2025:01:26:26 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:27 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:28 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:28 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:28 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:29 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:29 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:30 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:30 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:30 +0700] "GET /cong.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:31 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:32 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:33 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:34 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:34 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:34 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:35 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:35 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:36 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:36 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:37 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:37 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:38 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:38 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:38 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:39 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:39 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:40 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:40 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:40 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:41 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:42 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:42 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:43 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:43 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:43 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:44 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:44 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:45 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:45 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1036 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:46 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:46 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:47 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:47 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:48 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:48 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:48 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:49 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:49 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:50 +0700] "GET /admin/index.php HTTP/1.1" 301 1025 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:50 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:51 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:51 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:52 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:52 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:53 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:53 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:53 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:54 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:54 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:55 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:56 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:56 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:56 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:57 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:57 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:58 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:58 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:58 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:59 +0700] "GET /classsmtps.php HTTP/1.1" 301 1024 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:26:59 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:00 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:01 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:01 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:01 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:02 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:02 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:03 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:03 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:03 +0700] "GET /post.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:04 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:05 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:05 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:06 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:06 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:06 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:07 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:07 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:08 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:08 +0700] "GET /upfile.php HTTP/1.1" 301 1020 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:09 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:09 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:10 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:10 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:11 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:11 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:11 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:12 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:12 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:12 +0700] "GET /ini.php HTTP/1.1" 301 1017 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:13 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:14 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:14 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:15 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:15 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:15 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:16 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:16 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:17 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:17 +0700] "GET /mm.php HTTP/1.1" 301 1016 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:18 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:18 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:19 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:19 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:20 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:20 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:20 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:21 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:21 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:22 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
20.171.115.165 - - [19/Sep/2025:01:27:22 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
205.210.31.93 - - [19/Sep/2025:03:03:25 +0700] "GET / HTTP/1.1" 301 1047 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
162.14.210.15 - - [19/Sep/2025:07:05:00 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
17.241.75.161 - - [19/Sep/2025:10:08:20 +0700] "GET /robots.txt HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
49.232.151.112 - - [19/Sep/2025:11:02:42 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
135.225.82.247 - - [19/Sep/2025:13:23:32 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:33 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:34 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:34 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:35 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:35 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:35 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:36 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:36 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:36 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:37 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:38 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:38 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:39 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:39 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:39 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:40 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:40 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:41 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:41 +0700] "GET /goods.php HTTP/1.1" 301 1019 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:41 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:42 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:43 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:43 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:43 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:44 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:44 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:45 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:45 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:46 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:46 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:47 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:47 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:48 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:48 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:49 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:49 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:49 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:50 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:50 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1034 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:51 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:51 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:52 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:52 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:53 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:53 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:53 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:54 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:54 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:54 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:55 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:56 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [19/Sep/2025:13:23:56 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
93.158.90.65 - - [19/Sep/2025:13:28:34 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
93.158.90.74 - - [19/Sep/2025:13:28:36 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
111.172.249.49 - - [19/Sep/2025:15:06:07 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
143.110.253.167 - - [19/Sep/2025:16:43:13 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:19 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:23 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:29 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:36 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:50 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
143.110.253.167 - - [19/Sep/2025:16:43:59 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
20.171.115.165 - - [19/Sep/2025:16:56:41 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:42 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:43 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:43 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:44 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:44 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:44 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:45 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:45 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:46 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1046 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:46 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:47 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:47 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:48 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:48 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:48 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:49 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:49 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:50 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:50 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:51 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:51 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:52 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:52 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:53 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:53 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:53 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:54 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:54 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:55 +0700] "GET /index/function.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:55 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:56 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:56 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:57 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:57 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:58 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:58 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:58 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:59 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:56:59 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1040 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:00 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:01 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:01 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:01 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:02 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:02 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:03 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:03 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:03 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:04 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:04 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:05 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:06 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:06 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:06 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:07 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:07 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:08 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:08 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:08 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:09 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:10 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:10 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:11 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:11 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:11 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:12 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:12 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:13 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:13 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:14 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:14 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:15 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:15 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:15 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:16 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:16 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:17 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:17 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:17 +0700] "GET /alfanew.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:18 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:19 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:19 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:20 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:20 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:20 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:21 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:21 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:22 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:22 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1030 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:23 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:23 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:24 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:24 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:25 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:25 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:25 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:26 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:26 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:27 +0700] "GET /hoot.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:27 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:28 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:28 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:29 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:29 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:30 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:30 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:30 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:31 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:31 +0700] "GET /updates.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:32 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:33 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:33 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:33 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:34 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:34 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:34 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:35 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:35 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:36 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:36 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:37 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:37 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:38 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:38 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:39 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:39 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:39 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:40 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:40 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:41 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:42 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:42 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:42 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:43 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:16:57:43 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
182.10.161.226 - - [19/Sep/2025:18:04:18 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
51.171.180.62 - - [19/Sep/2025:18:06:20 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
51.171.180.62 - - [19/Sep/2025:18:06:20 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
114.96.103.33 - - [19/Sep/2025:19:02:25 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
199.45.155.90 - - [19/Sep/2025:22:49:26 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
58.49.233.126 - - [19/Sep/2025:23:05:00 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.171.115.165 - - [19/Sep/2025:23:34:45 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:46 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:47 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:47 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:47 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:48 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:48 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:49 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:49 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:49 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1046 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:50 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:51 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:51 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:51 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:52 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:52 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:53 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:53 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:53 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:54 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:54 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:55 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:56 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:56 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:56 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:57 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:57 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:58 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:58 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:58 +0700] "GET /index/function.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:34:59 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:00 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:00 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:01 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:01 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:01 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:02 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:02 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:03 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:03 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1040 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:04 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:04 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:05 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:05 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:06 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:06 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:06 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:07 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:07 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:07 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:08 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:09 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:09 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:10 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:10 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:10 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:11 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:11 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:12 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:12 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:13 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:13 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:14 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:14 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:15 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:15 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:15 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:16 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:16 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:17 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:17 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:18 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:19 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:19 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:19 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:20 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:20 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:20 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:21 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:21 +0700] "GET /alfanew.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:22 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:23 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:23 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:23 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:24 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:24 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:25 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:25 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:25 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:26 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1030 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:26 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:27 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:28 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:28 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:28 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:29 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:29 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:30 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:30 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:30 +0700] "GET /hoot.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:31 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:32 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:32 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:33 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:33 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:33 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:34 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:34 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:35 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:35 +0700] "GET /updates.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:36 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:36 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:37 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:37 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:37 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:38 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:38 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:39 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:39 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:39 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:40 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:41 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:41 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:42 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:42 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:42 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:43 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:43 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:44 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:44 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:45 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:45 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:46 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:46 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:47 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [19/Sep/2025:23:35:47 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
101.198.0.181 - - [20/Sep/2025:01:45:25 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
101.198.0.189 - - [20/Sep/2025:01:45:50 +0700] "GET /favicon.ico HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
101.198.0.157 - - [20/Sep/2025:01:45:57 +0700] "GET /robots.txt HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
101.198.0.155 - - [20/Sep/2025:01:46:03 +0700] "GET /sitemap.xml HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
147.93.158.41 - - [20/Sep/2025:02:54:17 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
147.93.158.41 - - [20/Sep/2025:02:54:17 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
180.110.203.108 - - [20/Sep/2025:02:56:57 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
185.248.85.42 - - [20/Sep/2025:05:46:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-requests/2.32.5"
139.155.139.22 - - [20/Sep/2025:06:45:21 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
106.227.49.113 - - [20/Sep/2025:10:32:51 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
52.87.12.190 - - [20/Sep/2025:11:10:11 +0700] "GET / HTTP/1.1" 301 1047 "-" "Uzbl (Webkit 1.3) (Linux i686 [i686])"
106.219.150.233 - - [20/Sep/2025:11:38:52 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
106.219.150.233 - - [20/Sep/2025:11:38:52 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
34.22.169.243 - - [20/Sep/2025:14:09:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-requests/2.32.5"
208.109.189.9 - - [20/Sep/2025:14:34:38 +0700] "HEAD / HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:41:36 +0700] "HEAD /wordpress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:45:39 +0700] "HEAD /Wordpress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:47:55 +0700] "HEAD /WORDPRESS HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:51:24 +0700] "HEAD /WordPress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:53:46 +0700] "HEAD /wp HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:55:54 +0700] "HEAD /Wp HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:14:58:51 +0700] "HEAD /WP HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:00:45 +0700] "HEAD /old HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:02:36 +0700] "HEAD /Old HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:05:30 +0700] "HEAD /OLD HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:07:59 +0700] "HEAD /oldsite HTTP/1.1" 301 217 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:08:56 +0700] "HEAD /new HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:12:54 +0700] "HEAD /New HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:14:05 +0700] "HEAD /NEW HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:17:05 +0700] "HEAD /wp-old HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:18:38 +0700] "HEAD /2022 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:20:53 +0700] "HEAD /2023 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:24:01 +0700] "HEAD /2024 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:26:51 +0700] "HEAD /2017 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:28:42 +0700] "HEAD /2020 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:31:27 +0700] "HEAD /2019 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:32:13 +0700] "HEAD /2018 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:36:01 +0700] "HEAD /backup HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:37:11 +0700] "HEAD /test HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:39:34 +0700] "HEAD /Test HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:41:36 +0700] "HEAD /TEST HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:43:46 +0700] "HEAD /demo HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:46:30 +0700] "HEAD /bc HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:47:39 +0700] "HEAD /www HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:50:41 +0700] "HEAD /WWW HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:51:51 +0700] "HEAD /Www HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:55:21 +0700] "HEAD /2021 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:57:12 +0700] "HEAD /main HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:15:59:47 +0700] "HEAD /old-site HTTP/1.1" 301 218 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:01:40 +0700] "HEAD /bk HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:03:31 +0700] "HEAD /Backup HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:05:58 +0700] "HEAD /BACKUP HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:08:12 +0700] "HEAD /SHOP HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:09:36 +0700] "HEAD /Shop HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:12:07 +0700] "HEAD /shop HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:13:38 +0700] "HEAD /bak HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:16:23 +0700] "HEAD /sitio HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:18:26 +0700] "HEAD /bac HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:20:41 +0700] "HEAD /sito HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:21:23 +0700] "HEAD /site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:23:29 +0700] "HEAD /Site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:26:40 +0700] "HEAD /SITE HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:28:23 +0700] "HEAD /blog HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:30:09 +0700] "HEAD /BLOG HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
208.109.189.9 - - [20/Sep/2025:16:32:42 +0700] "HEAD /Blog HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
121.4.97.180 - - [20/Sep/2025:22:34:42 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
118.195.165.218 - - [21/Sep/2025:02:30:52 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
135.225.82.247 - - [21/Sep/2025:02:57:19 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:20 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:20 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:21 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:21 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:21 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:22 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:22 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:22 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:23 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:23 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:24 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:25 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:25 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:25 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:26 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:26 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:26 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:27 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:27 +0700] "GET /file.php HTTP/1.1" 301 1018 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:28 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:29 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:29 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:29 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:30 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:30 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:30 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:31 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:31 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:32 +0700] "GET /nc4.php HTTP/1.1" 301 1017 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:32 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:33 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:33 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:34 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:34 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:35 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:35 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:35 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:36 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:36 +0700] "GET /10.php HTTP/1.1" 301 1016 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:37 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:37 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:38 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:38 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:39 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:39 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:39 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:40 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:40 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:40 +0700] "GET /ws.php HTTP/1.1" 301 1016 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:41 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:42 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:42 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:43 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:43 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:43 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:44 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:44 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1062 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:45 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:45 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1031 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:45 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:46 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:47 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:47 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:47 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:48 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:49 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:49 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:49 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:50 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1028 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:50 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:51 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:51 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:52 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:52 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:53 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:53 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:53 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:54 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:54 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1032 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:55 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:56 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:56 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:56 +0700] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:57 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:57 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:57 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:58 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:58 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:59 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1028 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:57:59 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:00 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:00 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:01 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:01 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:01 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:02 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:02 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:03 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:03 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1040 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:04 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:04 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:05 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:05 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:05 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:06 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:06 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 1076 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:07 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:07 +0700] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 1083 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:07 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1030 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:08 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:09 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:09 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:10 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:10 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:10 +0700] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:11 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 1073 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:11 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:11 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:12 +0700] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 1046 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:12 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:13 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:14 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:14 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 1073 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:14 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:15 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:15 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:15 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:16 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:16 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1030 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:17 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:18 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:19 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:19 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:19 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:20 +0700] "GET /upload/ HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:20 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:21 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:21 +0700] "GET /admin/ HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:21 +0700] "GET /images/ HTTP/1.1" 301 1017 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:22 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:23 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:23 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:23 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:24 +0700] "GET /Public/ HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:24 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:25 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:25 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:25 +0700] "GET /Site/ HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:26 +0700] "GET /system/ HTTP/1.1" 301 1017 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:26 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:27 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:27 +0700] "GET /files/ HTTP/1.1" 301 1053 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:28 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:28 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:29 +0700] "GET /Assets/ HTTP/1.1" 301 1054 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:29 +0700] "GET /images/stories/ HTTP/1.1" 301 1062 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:29 +0700] "GET /plugins/ HTTP/1.1" 301 1055 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:30 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:30 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1030 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:31 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1082 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:31 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:32 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:32 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:33 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "-"
135.225.82.247 - - [21/Sep/2025:02:58:33 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "-"
182.44.2.148 - - [21/Sep/2025:06:15:04 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
146.190.101.194 - - [21/Sep/2025:08:23:53 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:54 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:54 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:54 +0700] "POST /alfacgiapi/bash.alfa HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:54 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:54 +0700] "POST /alfacgiapi/py.alfa HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "GET /alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "GET /alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "GET /alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:55 +0700] "POST /ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:56 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:56 +0700] "POST /ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:56 +0700] "GET /ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:56 +0700] "GET /ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:23:56 +0700] "GET /ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:00 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:00 +0700] "POST /assets/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:00 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "POST /assets/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "POST /assets/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "GET /assets/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "GET /assets/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:01 +0700] "GET /assets/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "POST /assets/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "GET /assets/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "GET /assets/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:02 +0700] "GET /assets/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:03 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "POST /upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "POST /upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "POST /upload/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "GET /upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "GET /upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:04 +0700] "GET /upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "POST /upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "GET /upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:06 +0700] "GET /upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:07 +0700] "GET /upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:10 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:10 +0700] "POST /uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:10 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:10 +0700] "POST /uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:11 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:11 +0700] "POST /uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:11 +0700] "GET /uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:12 +0700] "GET /uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:12 +0700] "GET /uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:24 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:24 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:24 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "POST /uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:25 +0700] "GET /uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:27 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:27 +0700] "POST /assets/upload/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:27 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:27 +0700] "POST /assets/upload/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:27 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:28 +0700] "POST /assets/upload/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:28 +0700] "GET /assets/upload/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:28 +0700] "GET /assets/upload/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:28 +0700] "GET /assets/upload/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "POST /assets/upload/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:30 +0700] "GET /assets/upload/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:31 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:31 +0700] "POST /assets/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:31 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:31 +0700] "POST /assets/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:31 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:32 +0700] "POST /assets/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:32 +0700] "GET /assets/uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:32 +0700] "GET /assets/uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:32 +0700] "GET /assets/uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:33 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:34 +0700] "POST /assets/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:34 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:34 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:34 +0700] "GET /assets/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:35 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:35 +0700] "POST /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:35 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:35 +0700] "POST /wp-content/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "POST /wp-content/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "GET /wp-content/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "GET /wp-content/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "GET /wp-content/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/perl.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:36 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/bash.alfa HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "POST /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1133 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1133 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:37 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/wp-content/uploads/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1131 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:38 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:38 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:38 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:38 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:39 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:39 +0700] "POST /wp-content/uploads/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:39 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:39 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:39 +0700] "GET /wp-content/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:40 +0700] "POST /wp-content/plugins/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:40 +0700] "POST /wp-content/plugins/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:40 +0700] "POST /wp-content/plugins/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:40 +0700] "POST /wp-content/plugins/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:41 +0700] "POST /wp-content/plugins/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:41 +0700] "POST /wp-content/plugins/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:41 +0700] "GET /wp-content/plugins/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:41 +0700] "GET /wp-content/plugins/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:41 +0700] "GET /wp-content/plugins/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:42 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:42 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:42 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "POST /wp-content/plugins/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:43 +0700] "GET /wp-content/plugins/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:45 +0700] "POST /wp-content/themes/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:45 +0700] "POST /wp-content/themes/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:45 +0700] "POST /wp-content/themes/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:45 +0700] "POST /wp-content/themes/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:45 +0700] "POST /wp-content/themes/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:46 +0700] "POST /wp-content/themes/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:46 +0700] "GET /wp-content/themes/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:46 +0700] "GET /wp-content/themes/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:46 +0700] "GET /wp-content/themes/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:47 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:47 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "POST /wp-content/themes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1110 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:48 +0700] "GET /wp-content/themes/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/bash.alfa HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:49 +0700] "POST /wp-content/upgrade/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:50 +0700] "GET /wp-content/upgrade/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:50 +0700] "GET /wp-content/upgrade/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:50 +0700] "GET /wp-content/upgrade/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:54 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:54 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:54 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:54 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:54 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:55 +0700] "POST /wp-content/upgrade/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:55 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:55 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:55 +0700] "GET /wp-content/upgrade/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/bash.alfa HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "POST /wp-content/updraft/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "GET /wp-content/updraft/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "GET /wp-content/updraft/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:56 +0700] "GET /wp-content/updraft/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:58 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "POST /wp-content/updraft/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:24:59 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:00 +0700] "GET /wp-content/updraft/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:01 +0700] "POST /wp-content/plugins/library/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:01 +0700] "POST /wp-content/plugins/library/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:01 +0700] "POST /wp-content/plugins/library/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:01 +0700] "POST /wp-content/plugins/library/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:01 +0700] "POST /wp-content/plugins/library/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:02 +0700] "POST /wp-content/plugins/library/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:02 +0700] "GET /wp-content/plugins/library/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:02 +0700] "GET /wp-content/plugins/library/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:02 +0700] "GET /wp-content/plugins/library/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:05 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "POST /wp-content/plugins/library/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:06 +0700] "GET /wp-content/plugins/library/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:09 +0700] "POST /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:09 +0700] "POST /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:09 +0700] "POST /wp-admin/alfacgiapi/bash.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:09 +0700] "POST /wp-admin/alfacgiapi/bash.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:09 +0700] "POST /wp-admin/alfacgiapi/py.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:10 +0700] "POST /wp-admin/alfacgiapi/py.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:10 +0700] "GET /wp-admin/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:10 +0700] "GET /wp-admin/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:10 +0700] "GET /wp-admin/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:12 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:12 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:12 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:12 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:13 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:13 +0700] "POST /wp-admin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:13 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:13 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:13 +0700] "GET /wp-admin/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:14 +0700] "POST /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:14 +0700] "POST /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:14 +0700] "POST /wp-includes/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:14 +0700] "POST /wp-includes/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:15 +0700] "POST /wp-includes/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:15 +0700] "POST /wp-includes/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:15 +0700] "GET /wp-includes/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:15 +0700] "GET /wp-includes/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:15 +0700] "GET /wp-includes/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:16 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:16 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:16 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:16 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:17 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:17 +0700] "POST /wp-includes/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:17 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:17 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:17 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "POST /.well-known/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "GET /.well-known/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "GET /.well-known/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:20 +0700] "GET /.well-known/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "POST /.well-known/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:21 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:22 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:22 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:23 +0700] "POST /.well-known/acme-challenge/alfacgiapi/perl.alfa HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "POST /.well-known/acme-challenge/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "POST /.well-known/acme-challenge/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "POST /.well-known/acme-challenge/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "POST /.well-known/acme-challenge/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "POST /.well-known/acme-challenge/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "GET /.well-known/acme-challenge/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "GET /.well-known/acme-challenge/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:24 +0700] "GET /.well-known/acme-challenge/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:27 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:27 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:27 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:27 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:28 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:28 +0700] "POST /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:28 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:28 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:28 +0700] "GET /.well-known/acme-challenge/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:29 +0700] "POST /.well-known/pki-validation/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:30 +0700] "POST /.well-known/pki-validation/alfacgiapi/perl.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:30 +0700] "POST /.well-known/pki-validation/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:30 +0700] "POST /.well-known/pki-validation/alfacgiapi/bash.alfa HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:30 +0700] "POST /.well-known/pki-validation/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:30 +0700] "POST /.well-known/pki-validation/alfacgiapi/py.alfa HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:31 +0700] "GET /.well-known/pki-validation/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:31 +0700] "GET /.well-known/pki-validation/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:31 +0700] "GET /.well-known/pki-validation/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:35 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:35 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:35 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "POST /.well-known/pki-validation/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1119 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:36 +0700] "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1117 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:37 +0700] "POST /.tmb/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:37 +0700] "POST /.tmb/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "POST /.tmb/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "POST /.tmb/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "POST /.tmb/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "POST /.tmb/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "GET /.tmb/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "GET /.tmb/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:38 +0700] "GET /.tmb/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:39 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "POST /.tmb/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:40 +0700] "GET /.tmb/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:42 +0700] "POST /.quarantine/alfacgiapi/perl.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:42 +0700] "POST /.quarantine/alfacgiapi/perl.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:42 +0700] "POST /.quarantine/alfacgiapi/bash.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:42 +0700] "POST /.quarantine/alfacgiapi/bash.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:43 +0700] "POST /.quarantine/alfacgiapi/py.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:43 +0700] "POST /.quarantine/alfacgiapi/py.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:43 +0700] "GET /.quarantine/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:43 +0700] "GET /.quarantine/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:43 +0700] "GET /.quarantine/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "POST /.quarantine/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:46 +0700] "GET /.quarantine/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:48 +0700] "POST /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "POST /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "POST /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "POST /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "POST /cgi-bin/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "POST /cgi-bin/alfacgiapi/py.alfa HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "GET /cgi-bin/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "GET /cgi-bin/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:49 +0700] "GET /cgi-bin/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:51 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:51 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:51 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:51 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:51 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "POST /cgi-bin/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "GET /cgi-bin/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "POST /images/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:52 +0700] "POST /images/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "POST /images/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "POST /images/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "POST /images/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "POST /images/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "GET /images/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:53 +0700] "GET /images/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:54 +0700] "GET /images/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:55 +0700] "POST /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "POST /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "POST /images/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "POST /images/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "POST /images/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "POST /images/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "GET /images/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "GET /images/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:56 +0700] "GET /images/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:57 +0700] "POST /components/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:57 +0700] "POST /components/alfacgiapi/perl.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "POST /components/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "POST /components/alfacgiapi/bash.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "POST /components/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "POST /components/alfacgiapi/py.alfa HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "GET /components/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "GET /components/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:25:58 +0700] "GET /components/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "POST /components/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "GET /components/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "GET /components/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:00 +0700] "GET /components/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:01 +0700] "POST /wordpress/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "POST /wordpress/alfacgiapi/perl.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "POST /wordpress/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "POST /wordpress/alfacgiapi/bash.alfa HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "POST /wordpress/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "POST /wordpress/alfacgiapi/py.alfa HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "GET /wordpress/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "GET /wordpress/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:02 +0700] "GET /wordpress/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "POST /wordpress/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:04 +0700] "GET /wordpress/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/perl.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/perl.alfa HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/bash.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/bash.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/py.alfa HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:06 +0700] "POST /wp/alfacgiapi/py.alfa HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:07 +0700] "GET /wp/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:07 +0700] "GET /wp/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:07 +0700] "GET /wp/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:08 +0700] "POST /wp/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:08 +0700] "POST /wp/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "POST /wp/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "POST /wp/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "POST /wp/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "POST /wp/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "GET /wp/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "GET /wp/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "GET /wp/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:09 +0700] "POST /blog/alfacgiapi/perl.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "POST /blog/alfacgiapi/perl.alfa HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "POST /blog/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "POST /blog/alfacgiapi/bash.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "POST /blog/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "POST /blog/alfacgiapi/py.alfa HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:10 +0700] "GET /blog/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:11 +0700] "GET /blog/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:11 +0700] "GET /blog/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:11 +0700] "POST /blog/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "POST /blog/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "POST /blog/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "POST /blog/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "POST /blog/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "POST /blog/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "GET /blog/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "GET /blog/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:12 +0700] "GET /blog/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/bash.alfa HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "POST /new/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "GET /new/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:14 +0700] "GET /new/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:15 +0700] "GET /new/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:16 +0700] "POST /new/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:17 +0700] "POST /new/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:17 +0700] "POST /new/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:17 +0700] "POST /new/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /new/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /new/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "GET /new/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "GET /new/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "GET /new/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /old/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /old/alfacgiapi/perl.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /old/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:18 +0700] "POST /old/alfacgiapi/bash.alfa HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:19 +0700] "POST /old/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:19 +0700] "POST /old/alfacgiapi/py.alfa HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:19 +0700] "GET /old/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:20 +0700] "GET /old/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:20 +0700] "GET /old/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:20 +0700] "POST /old/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:20 +0700] "POST /old/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:20 +0700] "POST /old/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "POST /old/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "POST /old/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "POST /old/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "GET /old/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "GET /old/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:21 +0700] "GET /old/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/perl.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/perl.alfa HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/bash.alfa HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:22 +0700] "POST /backup/alfacgiapi/py.alfa HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:23 +0700] "GET /backup/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:23 +0700] "GET /backup/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:23 +0700] "GET /backup/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:23 +0700] "POST /backup/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:23 +0700] "POST /backup/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "POST /backup/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "POST /backup/ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "POST /backup/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "POST /backup/ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "GET /backup/ALFA_DATA/alfacgiapi/index.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "GET /backup/ALFA_DATA/alfacgiapi/radio.php?bx=0e215962017 HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:24 +0700] "GET /backup/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:25 +0700] "GET /un.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:29 +0700] "GET /foxx.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:29 +0700] "GET /wawe.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:30 +0700] "GET /js.php?get HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:32 +0700] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:33 +0700] "GET /wp-email.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:36 +0700] "GET /wp-booking.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:37 +0700] "GET /fierza.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:38 +0700] "GET /load.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:38 +0700] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 301 1047 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:39 +0700] "GET /wp-content/themes/fitnessbase/crp.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:41 +0700] "GET /alpha.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:41 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:43 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:43 +0700] "GET /manager.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:46 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:48 +0700] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:49 +0700] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 1096 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:50 +0700] "GET /lock360.php?daksldlkdsadas=1 HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:52 +0700] "GET /5.php HTTP/1.1" 301 1015 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:52 +0700] "GET /01.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:55 +0700] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 301 1087 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:26:57 +0700] "GET /.well-known/wp-signup.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:00 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:02 +0700] "GET /0o.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:04 +0700] "GET /ciis.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:08 +0700] "GET /zfox.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:10 +0700] "GET /zf.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:10 +0700] "GET /room.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:11 +0700] "GET /xd.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:12 +0700] "GET /adriv.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:12 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:16 +0700] "GET /tonant.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:18 +0700] "GET /b.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:19 +0700] "GET /xleet-shell.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:20 +0700] "GET /4mosan.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:21 +0700] "GET /cong.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:22 +0700] "GET /config.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:23 +0700] "GET /wp-key.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:25 +0700] "GET /wp-conctent.php HTTP/1.1" 301 1025 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:27 +0700] "GET /flame.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:29 +0700] "GET /wp-content/flame.php HTTP/1.1" 301 1067 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:32 +0700] "GET /block-patwp.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:36 +0700] "GET /bre.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:38 +0700] "GET /lx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:38 +0700] "GET /991176.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:39 +0700] "GET /ffAA531.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:40 +0700] "GET /wp-help.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:41 +0700] "GET /un.php?f=f HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:44 +0700] "GET /un2.php?f=f HTTP/1.1" 301 1021 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:47 +0700] "GET /wp-posts.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:48 +0700] "GET /xl.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:49 +0700] "GET /ww.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:50 +0700] "GET /testwp.php?wp=1 HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:52 +0700] "GET /kyami.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:52 +0700] "GET /wp-includes/class-wp-other.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:53 +0700] "GET /unknown.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:54 +0700] "GET /1975.phP HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:57 +0700] "GET /Mo2AaAaAaPrivateShell.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:27:57 +0700] "GET /god4m.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:00 +0700] "GET /tuco.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:02 +0700] "GET /x.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:03 +0700] "GET /w.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:04 +0700] "GET /shl.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:07 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:09 +0700] "GET /info.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:10 +0700] "GET /o.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:11 +0700] "GET /shx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:13 +0700] "GET /l.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:16 +0700] "GET /hi.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:20 +0700] "GET /readme.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:21 +0700] "GET /pi.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:26 +0700] "GET /wp-content/themes/noriumportfolio/img_screen.php HTTP/1.1" 301 1095 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:30 +0700] "GET /wp-content/themes/noriumportfolio/doc.php HTTP/1.1" 301 1088 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:31 +0700] "GET /wp-content/themes/noriumportfolio/alpha.php HTTP/1.1" 301 1090 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:32 +0700] "GET /wp-content/themes/noriumportfolio/db.php?u HTTP/1.1" 301 1089 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:34 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:35 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:36 +0700] "GET /wp-content/themes/skatepark/alpha.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:37 +0700] "GET /wp-content/themes/skatepark/img_screen.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:37 +0700] "GET /wp-content/themes/skatepark/db.php?u HTTP/1.1" 301 1083 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:40 +0700] "GET /wp-content/themes/skatepark/doc.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:42 +0700] "GET /wp-content/plugins/db/mar.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:44 +0700] "GET /wp-content/themes/wp-pridmag/22x.php HTTP/1.1" 301 1083 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:47 +0700] "GET /wp-content/plugins/ndak/1.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:47 +0700] "GET /wp-content/plugins/ndak/marijuana.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:49 +0700] "GET /wp-content/themes/workart/db.php?u HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:50 +0700] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 301 1078 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:54 +0700] "GET /wp-content/plugins/cache-wordpress/wp-activates.php HTTP/1.1" 301 1098 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:57 +0700] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:28:57 +0700] "GET /wp-content/plugins/cekidot/readme.txt HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:03 +0700] "GET /wp-content/plugins/cekidot/mar.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:06 +0700] "GET /wp-content/themes/workart/doc.php HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:09 +0700] "GET /wp-content/themes/theme/gr.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:23 +0700] "GET /wp-content/themes/pridmag/init.php HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:24 +0700] "GET /wp-content/themes/jobart/db.php?u HTTP/1.1" 301 1080 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:27 +0700] "GET /wp-content/themes/jobart/doc.php HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:28 +0700] "GET /wp-content/themes/cepair/doc.php HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:31 +0700] "GET /wp-content/themes/cakiltheme/up.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:32 +0700] "GET /wp-content/themes/cakiltheme/idx.php HTTP/1.1" 301 1046 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:33 +0700] "GET /wp-content/themes/wp-pridmag/status.php HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:36 +0700] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:36 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:37 +0700] "GET /wp-content/themes/rishi/doc.php HTTP/1.1" 301 1078 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:46 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:49 +0700] "GET /wp-content/themes/rishi/db.php?u HTTP/1.1" 301 1079 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:50 +0700] "GET /wp-content/plugins/virr/v.php HTTP/1.1" 301 1076 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:52 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:54 +0700] "GET /wp-content/plugins/virr/uploader.php?uploader HTTP/1.1" 301 1092 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:55 +0700] "GET /wp-content/plugins/db/uploader.php?uploader HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:55 +0700] "GET /wp-content/plugins/wp-freeform/wawe.php HTTP/1.1" 301 1086 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:56 +0700] "GET /wp-content/plugins/wp-freeform/includes/loadme.php HTTP/1.1" 301 1097 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:56 +0700] "GET /wp-content/plugins/wp-freeform/style.php HTTP/1.1" 301 1087 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:57 +0700] "GET /?loadme HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:29:58 +0700] "GET /galekjaya.php?raimu=tgl99 HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:00 +0700] "GET /r00t.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:07 +0700] "GET /Xzd.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:08 +0700] "GET /radio.php?pass=shell HTTP/1.1" 301 1067 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:08 +0700] "GET /content.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:09 +0700] "GET /about.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:09 +0700] "GET /admin.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:11 +0700] "GET /css.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:12 +0700] "GET /doc.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:13 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:16 +0700] "GET /v.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:18 +0700] "GET /ups.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:19 +0700] "GET /up.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:21 +0700] "GET /fw.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:22 +0700] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 1071 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:24 +0700] "GET /local.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:25 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:26 +0700] "GET /1index.php?pass=shell HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:26 +0700] "GET /2index.php?pass=shell HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:28 +0700] "GET /3index.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1096 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:29 +0700] "GET /wikindex.php?f=NmRtJOUjAdutReQjscRjKUhleBpzmTyO.txt HTTP/1.1" 301 1098 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:31 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:32 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:33 +0700] "GET /wp-admin/includes/1975.php HTTP/1.1" 301 1073 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:34 +0700] "GET /wp-backup-sql-302.php HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:35 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1034 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:35 +0700] "GET /wp-inlcudes.php?katib HTTP/1.1" 301 1068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:39 +0700] "GET /wp-js.php?phpshells HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:40 +0700] "GET /wp-load.php?daksldlkdsadas=1 HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:41 +0700] "GET /sys.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:42 +0700] "GET /0.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:42 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:44 +0700] "GET /0x0.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:47 +0700] "GET /0z.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:51 +0700] "GET /1.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:51 +0700] "GET /13.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:52 +0700] "GET /1877.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:55 +0700] "GET /1975.php?CVE=2022 HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:55 +0700] "GET /1975.php?CVE=2021 HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:30:57 +0700] "GET /1975.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:00 +0700] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 1070 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:02 +0700] "GET /403.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:04 +0700] "GET /404.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:09 +0700] "GET /45.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:12 +0700] "GET /4x4.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:12 +0700] "GET /73.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:14 +0700] "GET /a.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:16 +0700] "GET /abc.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:17 +0700] "GET /al.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:19 +0700] "GET /alf.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:20 +0700] "GET /alf4.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:21 +0700] "GET /alfa-ioxi.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:23 +0700] "GET /alfa-shell-v4.php HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:24 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:26 +0700] "GET /alfakun.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:28 +0700] "GET /alfatesla.php HTTP/1.1" 301 1023 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:33 +0700] "GET /alfateslav4.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:34 +0700] "GET /alwso.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:35 +0700] "GET /anjay.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:38 +0700] "GET /anon.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:39 +0700] "GET /anons79.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:42 +0700] "GET /base.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:46 +0700] "GET /batm.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:49 +0700] "GET /bj.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:50 +0700] "GET /black.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:53 +0700] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 1040 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:56 +0700] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:58 +0700] "GET /by.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:31:59 +0700] "GET /byp.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:00 +0700] "GET /bypas.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:00 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:01 +0700] "GET /byps.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:06 +0700] "GET /c.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:07 +0700] "GET /ccaef.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:10 +0700] "GET /chitoge.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:12 +0700] "GET /codeboy1877x.php HTTP/1.1" 301 1026 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:16 +0700] "GET /con.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:17 +0700] "GET /con7.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:21 +0700] "GET /con7ext.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:24 +0700] "GET /dbx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:28 +0700] "GET /defau1t.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:31 +0700] "GET /degeselih.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:33 +0700] "GET /dev.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:34 +0700] "GET /docindex.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:34 +0700] "GET /dosya.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:35 +0700] "GET /Dz.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:36 +0700] "GET /e.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:37 +0700] "GET /error.php?phpshells HTTP/1.1" 301 1066 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:39 +0700] "GET /evil.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:40 +0700] "GET /file.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:41 +0700] "GET /fox.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:43 +0700] "GET /FoxWSO-full.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:45 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:47 +0700] "GET /foxwso.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:47 +0700] "GET /gank.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:49 +0700] "GET /gank.php.PhP HTTP/1.1" 301 1022 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:50 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:52 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:53 +0700] "GET /gh.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:55 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:32:59 +0700] "GET /i.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:01 +0700] "GET /id.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:04 +0700] "GET /ids.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:06 +0700] "GET /idx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:08 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:10 +0700] "GET /init.php HTTP/1.1" 301 1018 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:12 +0700] "GET /ioxi.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:16 +0700] "GET /iq.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:16 +0700] "GET /iqb.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:19 +0700] "GET /k.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:21 +0700] "GET /kepo.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:21 +0700] "GET /kk.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:25 +0700] "GET /kndw1.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:28 +0700] "GET /la.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:32 +0700] "GET /lnedx.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:34 +0700] "GET /lol.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:37 +0700] "GET /lolzk.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:40 +0700] "GET /m.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:41 +0700] "GET /mar.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:43 +0700] "GET /marijuana.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:44 +0700] "GET /mas.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:45 +0700] "GET /mass.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:46 +0700] "GET /mclash.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:47 +0700] "GET /mi.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:48 +0700] "GET /min.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:51 +0700] "GET /mini.php HTTP/1.1" 301 1018 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:53 +0700] "GET /minik.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:33:57 +0700] "GET /minishell.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:03 +0700] "GET /mrjn.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:05 +0700] "GET /n.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:06 +0700] "GET /new-index.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:09 +0700] "GET /ninja.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:11 +0700] "GET /ohayo.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:12 +0700] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 1077 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:15 +0700] "GET /olux.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:18 +0700] "GET /postfs.php HTTP/1.1" 301 1020 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:20 +0700] "GET /pref.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:22 +0700] "GET /priv.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:23 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:25 +0700] "GET /qindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:26 +0700] "GET /r.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:26 +0700] "GET /r57.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:28 +0700] "GET /rex.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:33 +0700] "GET /root.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:33 +0700] "GET /s.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:36 +0700] "GET /shell.php HTTP/1.1" 301 1019 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:36 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:37 +0700] "GET /shells.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:39 +0700] "GET /sql.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:39 +0700] "GET /srx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:40 +0700] "GET /sym.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:42 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:42 +0700] "GET /t.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:43 +0700] "GET /tes.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:44 +0700] "GET /tesla.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:48 +0700] "GET /teslav.php HTTP/1.1" 301 1020 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:50 +0700] "GET /test.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:52 +0700] "GET /tshop.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:53 +0700] "GET /twin.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:53 +0700] "GET /u.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:54 +0700] "GET /upload.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:56 +0700] "GET /uploader.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:34:58 +0700] "GET /usb.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:05 +0700] "GET /usr.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:08 +0700] "GET /utchiha.phP HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:12 +0700] "GET /v3.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:13 +0700] "GET /v4.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:17 +0700] "GET /vuln.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:20 +0700] "GET /w3llstore.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:21 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:25 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:26 +0700] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 1082 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:27 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:29 +0700] "GET /wp-defaul.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:31 +0700] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:32 +0700] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 1034 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:33 +0700] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 1072 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:34 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:35 +0700] "GET /wp-mails.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:35 +0700] "GET /wp-one.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:35 +0700] "GET /wp-pluging.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:37 +0700] "GET /wp-plugins.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:39 +0700] "GET /wp-rss.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:41 +0700] "GET /wp-singupp.php HTTP/1.1" 301 1061 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:42 +0700] "GET /wp-site.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:43 +0700] "GET /wp-system.php HTTP/1.1" 301 1023 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:44 +0700] "GET /wp-title.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:45 +0700] "GET /wp-we.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:46 +0700] "GET /wp.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:48 +0700] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:49 +0700] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 1075 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:51 +0700] "GET /wpindex.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:52 +0700] "GET /ws.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:53 +0700] "GET /wsanon.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:54 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:55 +0700] "GET /wso.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:56 +0700] "GET /wso1.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:58 +0700] "GET /wso1337.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:35:58 +0700] "GET /wso2.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:02 +0700] "GET /xcv.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:04 +0700] "GET /xidcm.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:06 +0700] "GET /xindex.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:08 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:10 +0700] "GET /xm.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:13 +0700] "GET /xx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:14 +0700] "GET /XxX.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:15 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:17 +0700] "GET /y.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:18 +0700] "GET /z.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:19 +0700] "GET /zk.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:21 +0700] "GET /zone.php?phpshell HTTP/1.1" 301 1064 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:22 +0700] "GET /zx.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:23 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:26 +0700] "GET /c99.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:26 +0700] "GET /ok.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:29 +0700] "GET /2.php HTTP/1.1" 301 1015 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:31 +0700] "GET /3.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:32 +0700] "GET /4.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:33 +0700] "GET /6.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:35 +0700] "GET /7.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:37 +0700] "GET /8.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:38 +0700] "GET /9.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:40 +0700] "GET /10.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:43 +0700] "GET /p.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:44 +0700] "GET /q.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:44 +0700] "GET /d.php HTTP/1.1" 301 1015 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:47 +0700] "GET /f.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:47 +0700] "GET /g.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:50 +0700] "GET /h.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:52 +0700] "GET /j.php HTTP/1.1" 301 1052 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:52 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:53 +0700] "GET /minimo.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:55 +0700] "GET /V3.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:56 +0700] "GET /V5.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:57 +0700] "GET /www.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:57 +0700] "GET /100.php HTTP/1.1" 301 1017 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:36:59 +0700] "GET /777.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:00 +0700] "GET /xox.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:02 +0700] "GET /new.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:03 +0700] "GET /wi.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:03 +0700] "GET /nee.php HTTP/1.1" 301 1054 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:04 +0700] "GET /87.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:06 +0700] "GET /haxor.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:08 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1059 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:10 +0700] "GET /bb.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:10 +0700] "GET /lf.php HTTP/1.1" 301 1016 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:10 +0700] "GET /hello.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:14 +0700] "GET /if.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:17 +0700] "GET /kn.php HTTP/1.1" 301 1053 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:18 +0700] "GET /3301.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:19 +0700] "GET /anone.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:20 +0700] "GET /wp-configer.php HTTP/1.1" 301 1062 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:21 +0700] "GET /wp-ad.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:21 +0700] "GET /send.php HTTP/1.1" 301 1055 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:22 +0700] "GET /.wp-cache.php HTTP/1.1" 301 1060 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:23 +0700] "GET /sendmail.php HTTP/1.1" 301 1022 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:25 +0700] "GET /rahma.php HTTP/1.1" 301 1056 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:27 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:28 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:29 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.32.5"
146.190.101.194 - - [21/Sep/2025:08:37:31 +0700] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1068 "-" "python-requests/2.32.5"
146.190.101.194 - - [21/Sep/2025:08:37:32 +0700] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1064 "-" "python-requests/2.32.5"
146.190.101.194 - - [21/Sep/2025:08:37:32 +0700] "GET /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1090 "-" "python-requests/2.32.5"
146.190.101.194 - - [21/Sep/2025:08:37:33 +0700] "GET /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1080 "-" "python-requests/2.32.5"
146.190.101.194 - - [21/Sep/2025:08:37:35 +0700] "GET /assets/editor/fileman/dev.html HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:39 +0700] "GET /assets/editor/fileman/index.html HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:40 +0700] "GET /js/fileman/dev.html HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:40 +0700] "GET /js/fileman/index.html HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:42 +0700] "GET /fileman/index.html HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:43 +0700] "GET /fileman/dev.html HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:44 +0700] "GET /lib/fileman/index.html HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:48 +0700] "GET /lib/fileman/dev.html HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:49 +0700] "GET /admin/fileman/index.html HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:37:50 +0700] "GET /admin/fileman/dev.html HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
146.190.101.194 - - [21/Sep/2025:08:46:31 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:33 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:38 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:40 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:44 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:46 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:49 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:52 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:54 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:46:58 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:03 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:08 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:11 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:15 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:17 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:22 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:27 +0700] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:31 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:33 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:37 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:40 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:44 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:48 +0700] "GET /db.php?u HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:51 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:55 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:47:59 +0700] "GET /Byp.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:04 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:08 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:11 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:14 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:19 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:22 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:25 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:29 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:31 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:34 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:39 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:44 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:46 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:50 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:56 +0700] "GET /wp-edit.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:48:59 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:03 +0700] "GET /cok.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:08 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:12 +0700] "GET /idk.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:15 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:19 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:23 +0700] "GET /alpa.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:26 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:28 +0700] "GET /alfax.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:33 +0700] "GET /memek.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:35 +0700] "GET /kontol.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:38 +0700] "GET /indoxploit.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:42 +0700] "GET /clen.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:46 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:49 +0700] "GET /caches.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:52 +0700] "GET /creates.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:55 +0700] "GET /fr.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:49:59 +0700] "GET /index404.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:05 +0700] "GET /stats.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:11 +0700] "GET /azdare.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:14 +0700] "GET /laymu.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:17 +0700] "GET /macibay.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:20 +0700] "GET /fdgfdgdsfd.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:22 +0700] "GET /wp-update.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:26 +0700] "GET /legal.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:30 +0700] "GET /yuuki2.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:33 +0700] "GET /rootshell.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:34 +0700] "GET /rexx.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:38 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:41 +0700] "GET /tes.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:45 +0700] "GET /twin.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:50 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:54 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:50:58 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:00 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:04 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:07 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:11 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:14 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:18 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:22 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:25 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:28 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:30 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:33 +0700] "GET /n.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:38 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:41 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:45 +0700] "GET /q.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:48 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:51 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:55 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:51:57 +0700] "GET /u.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:02 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:07 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:10 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:13 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:17 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:22 +0700] "GET /wp-rss.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:25 +0700] "GET /wp-plugins.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:29 +0700] "GET /wp-system.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:31 +0700] "GET /wp-title.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:34 +0700] "GET /wpindex.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:38 +0700] "GET /wso1337.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:41 +0700] "GET /rad.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:44 +0700] "GET /id.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:47 +0700] "GET /rename.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:50 +0700] "GET /wso2023.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:55 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:57 +0700] "GET /ey.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:52:58 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:01 +0700] "GET /v3.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:06 +0700] "GET /leaf.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:09 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:18 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:26 +0700] "GET /use.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:31 +0700] "GET /wp-clon.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:33 +0700] "GET /blvck.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:37 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:41 +0700] "GET /domain.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:44 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:48 +0700] "GET /mano.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:51 +0700] "GET /sx.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:52 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:53:56 +0700] "GET /1234.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:00 +0700] "GET /whmcs.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:04 +0700] "GET /db-config.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:08 +0700] "GET /gac.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:11 +0700] "GET /shelss.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:15 +0700] "GET /xzd.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:18 +0700] "GET /xzdd.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:22 +0700] "GET /wp-mailcek.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:25 +0700] "GET /revisi.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:28 +0700] "GET /degesaciihaxor.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:31 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:35 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:39 +0700] "GET /devil.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:42 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:45 +0700] "GET /hhh.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:48 +0700] "GET /sambernyawa.php HTTP/1.1" 301 1062 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:51 +0700] "GET /data-user.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:54 +0700] "GET /301.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:54:58 +0700] "GET /zec.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:01 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:05 +0700] "GET /sct.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:09 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:12 +0700] "GET /wp-smail.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:16 +0700] "GET /shell_lock.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:18 +0700] "GET /teamadmin.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:22 +0700] "GET /lux.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:26 +0700] "GET /sang3.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:29 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:33 +0700] "GET /pirja.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:36 +0700] "GET /olux.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:39 +0700] "GET /module.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:42 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:46 +0700] "GET /su.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:49 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:53 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:55:56 +0700] "GET /ikeh.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:00 +0700] "GET /includes.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:04 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:08 +0700] "GET /syd.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:11 +0700] "GET /fierza.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:14 +0700] "GET /green.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:17 +0700] "GET /theme-single.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:21 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:26 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:29 +0700] "GET /profile.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:32 +0700] "GET /class_appfun.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:36 +0700] "GET /user-edit.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:38 +0700] "GET /class-ftp-pures.php HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:40 +0700] "GET /by.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:43 +0700] "GET /cy.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:47 +0700] "GET /sql.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:50 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:53 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:56:58 +0700] "GET /rex.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:01 +0700] "GET /cylul.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:05 +0700] "GET /fx.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:08 +0700] "GET /fx-mini.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:11 +0700] "GET /FX.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:15 +0700] "GET /wp-commentin.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:16 +0700] "GET /data.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:21 +0700] "GET /update.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:24 +0700] "GET /wsoshell.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:28 +0700] "GET /defaul.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:30 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:33 +0700] "GET /wp-functions.php HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:37 +0700] "GET /wp_fma.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:40 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:44 +0700] "GET /alfaaneh.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:47 +0700] "GET /wp_mna.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:53 +0700] "GET /wp-god.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:57:57 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:01 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:06 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:10 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:13 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:16 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:19 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:23 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:27 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:31 +0700] "GET /orange.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:36 +0700] "GET /en.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:40 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:43 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:47 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:50 +0700] "GET /upgrade.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:54 +0700] "GET /wg.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:57 +0700] "GET /antiheker.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:58:59 +0700] "GET /wp-contact.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:01 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:05 +0700] "GET /pler.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:11 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:20 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:25 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:29 +0700] "GET /bypass403.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:32 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:37 +0700] "GET /adm.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:40 +0700] "GET /abc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:42 +0700] "GET /wp-aespa.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:46 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:49 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:53 +0700] "GET /sym.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:56 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:08:59:59 +0700] "GET /1313.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:04 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:09 +0700] "GET /cyl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:14 +0700] "GET /r00t.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:18 +0700] "GET /idx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:22 +0700] "GET /Idx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:24 +0700] "GET /mari.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:27 +0700] "GET /minishell.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:32 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:35 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:40 +0700] "GET /wp-2018.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:42 +0700] "GET /wp-2017.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:46 +0700] "GET /style-js.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:49 +0700] "GET /login.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:53 +0700] "GET /remove.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:00:57 +0700] "GET /obfbyte.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:00 +0700] "GET /zzz.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:04 +0700] "GET /1337.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:08 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:11 +0700] "GET /anonsec.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:15 +0700] "GET /anon.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:18 +0700] "GET /licenses.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:22 +0700] "GET /bps.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:25 +0700] "GET /library.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:27 +0700] "GET /wp-root.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:31 +0700] "GET /wp-.myluv.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:34 +0700] "GET /wp-users.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:37 +0700] "GET /wp-menu.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:40 +0700] "GET /88.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:42 +0700] "GET /bypass404.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:47 +0700] "GET /back.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:50 +0700] "GET /priv01.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:52 +0700] "GET /meki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:56 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:01:59 +0700] "GET /help.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:02 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:06 +0700] "GET /303.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:09 +0700] "GET /sample-config-options.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:13 +0700] "GET /wp-config-samsples.php HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:15 +0700] "GET /ye.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:19 +0700] "GET /clay.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:22 +0700] "GET /forbiden.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:25 +0700] "GET /class-wp.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:29 +0700] "GET /curme.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:32 +0700] "GET /xdoor.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:36 +0700] "GET /joy.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:40 +0700] "GET /ri.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:43 +0700] "GET /cd.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:49 +0700] "GET /on-settingssl.php HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:53 +0700] "GET /db.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:56 +0700] "GET /wp-del.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:02:59 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:02 +0700] "GET /makesmtp.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:07 +0700] "GET /product.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:11 +0700] "GET /stylec.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:14 +0700] "GET /ticket.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:15 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:19 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:22 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:26 +0700] "GET /401.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:29 +0700] "GET /405.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:32 +0700] "GET /shl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:34 +0700] "GET /scn.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:38 +0700] "GET /lowpr.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:41 +0700] "GET /63ck0.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:45 +0700] "GET /pda.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:48 +0700] "GET /danci.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:51 +0700] "GET /fse.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:54 +0700] "GET /anonym.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:03:58 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:02 +0700] "GET /demos.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:07 +0700] "GET /demon.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:11 +0700] "GET /tesla.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:14 +0700] "GET /clan.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:19 +0700] "GET /Fdbxhriw.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:22 +0700] "GET /kontoru.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:25 +0700] "GET /1111.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:29 +0700] "GET /shell4.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:34 +0700] "GET /lyda.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:38 +0700] "GET /ids.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:41 +0700] "GET /Priv.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:45 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:48 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:52 +0700] "GET /zz.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:55 +0700] "GET /database.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:04:58 +0700] "GET /dr.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:03 +0700] "GET /wp-init.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:08 +0700] "GET /blue.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:11 +0700] "GET /admin1.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:14 +0700] "GET /fast.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:18 +0700] "GET /ipt.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:22 +0700] "GET /wp-raze.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:26 +0700] "GET /foxwso.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:29 +0700] "GET /wp_backup.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:36 +0700] "GET /wp-one.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:40 +0700] "GET /wp-pluging.php HTTP/1.1" 301 1061 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:42 +0700] "GET /wp-mails.ph HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:46 +0700] "GET /wp-defaul.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:50 +0700] "GET /ah.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:54 +0700] "GET /m4r1ju4n4.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:05:59 +0700] "GET /aab.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:04 +0700] "GET /kuda.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:08 +0700] "GET /kii.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:13 +0700] "GET /dxshell.php HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:16 +0700] "GET /main.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:20 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:25 +0700] "GET /529.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:29 +0700] "GET /nshell.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:32 +0700] "GET /predator.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:36 +0700] "GET /zaco.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:38 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:42 +0700] "GET /b374k.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:50 +0700] "GET /cgi.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:52 +0700] "GET /owl.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:56 +0700] "GET /yuuki.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:06:59 +0700] "GET /yuki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:03 +0700] "GET /spawn.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:07 +0700] "GET /puki.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:11 +0700] "GET /well.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:14 +0700] "GET /black.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:17 +0700] "GET /fatal.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:21 +0700] "GET /con.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:24 +0700] "GET /con7.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:28 +0700] "GET /dbx.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:32 +0700] "GET /dev.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:35 +0700] "GET /docindex.php HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:38 +0700] "GET /Dz.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:40 +0700] "GET /FoxWSO.php HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:43 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:46 +0700] "GET /asu.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:48 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:51 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:54 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:07:58 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:03 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:06 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:09 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:11 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:15 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:20 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:23 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:28 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1079 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:31 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:34 +0700] "GET /wp-content/patior/ HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:37 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:41 +0700] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:44 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:47 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:51 +0700] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:55 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
146.190.101.194 - - [21/Sep/2025:09:08:59 +0700] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 1081 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force"
182.44.10.67 - - [21/Sep/2025:10:02:28 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
198.235.24.45 - - [21/Sep/2025:13:47:24 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
20.243.32.194 - - [21/Sep/2025:13:50:38 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
20.243.32.194 - - [21/Sep/2025:13:50:38 +0700] "POST / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
110.166.71.39 - - [21/Sep/2025:13:58:56 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
74.241.245.97 - - [21/Sep/2025:15:21:23 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:23 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:24 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:24 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:25 +0700] "GET /wp- HTTP/1.1" 301 1050 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:25 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:25 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:26 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:26 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:27 +0700] "GET /chosen.php HTTP/1.1" 301 1020 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:27 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:28 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:28 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:29 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:29 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:29 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:30 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:30 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1065 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:31 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:31 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:32 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:32 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:33 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:33 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:33 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:34 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:34 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:35 +0700] "GET /gebase.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:35 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:35 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:36 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:37 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:37 +0700] "GET /fi2.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:37 +0700] "GET /filemanager.php? HTTP/1.1" 301 1062 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:38 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:38 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:39 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:39 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:39 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:40 +0700] "GET /jp.php HTTP/1.1" 301 1016 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:40 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:41 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:42 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:42 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:42 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:43 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:43 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:43 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:44 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:44 +0700] "GET /NewFile.php HTTP/1.1" 301 1021 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:45 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:46 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:46 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:46 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:47 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:47 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:47 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:48 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:48 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:49 +0700] "GET /y.php HTTP/1.1" 301 1015 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:49 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:50 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:50 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:51 +0700] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 1082 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:51 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:51 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:52 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:52 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:53 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:53 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1039 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:54 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:54 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:55 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:55 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:56 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:56 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:56 +0700] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 1085 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:57 +0700] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 1085 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:57 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:57 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:58 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:59 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:21:59 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:00 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:00 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:00 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:01 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:01 +0700] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 1088 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:01 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:02 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1038 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:02 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:03 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:04 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:04 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:04 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:05 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:05 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:06 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:06 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:06 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1038 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:07 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:08 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:08 +0700] "GET /wp-includes/404.php HTTP/1.1" 301 1066 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:08 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:09 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:09 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:10 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:10 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:10 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:11 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1040 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:11 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:12 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:12 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:13 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:13 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:14 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:14 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:14 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:15 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:15 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1026 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:16 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:16 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:17 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:17 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:18 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:18 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:18 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:19 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:19 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:20 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1026 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:20 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:21 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:21 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:22 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:22 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:23 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:23 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:23 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:24 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:24 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1041 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:25 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:25 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
74.241.245.97 - - [21/Sep/2025:15:22:26 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
100.24.208.151 - - [21/Sep/2025:16:51:49 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; U; Android 11; zh-CN; V2121A Build/RP1A.200720.012) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.108 Quark/5.4.9.201 Mobile Safari/537.36"
20.171.115.165 - - [21/Sep/2025:17:44:40 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:41 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:41 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:42 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:42 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:43 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:43 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:43 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:44 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:44 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1046 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:45 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:45 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:46 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:46 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:47 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:47 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:47 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:48 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:48 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:49 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:49 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:50 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:50 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:51 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:51 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:52 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:52 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:53 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:53 +0700] "GET /index/function.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:54 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:55 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:55 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:55 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:56 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:56 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:56 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:57 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:57 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:58 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1040 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:58 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:59 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:44:59 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:00 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:00 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:01 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:01 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:01 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:02 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:02 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:03 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:04 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:04 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:04 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:05 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:05 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:06 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:06 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:06 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:07 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:07 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:08 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:09 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:09 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:09 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:10 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:10 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:10 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:11 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:11 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:12 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:13 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:13 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:13 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:14 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:14 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:15 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:15 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:15 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:16 +0700] "GET /alfanew.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:16 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:17 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:18 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:18 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:18 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:19 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:19 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:20 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:20 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:20 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1030 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:21 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:22 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:22 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:23 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:23 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:23 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:24 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:24 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:25 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:25 +0700] "GET /hoot.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:25 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:26 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:27 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:27 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:27 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:28 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:28 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:29 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:29 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:29 +0700] "GET /updates.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:30 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:31 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:31 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:32 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:32 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:32 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:33 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:33 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:34 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:34 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:35 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:35 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:36 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:36 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:37 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:37 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:37 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:38 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:38 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:39 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:39 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:40 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:40 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:41 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:41 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [21/Sep/2025:17:45:42 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
182.44.8.254 - - [21/Sep/2025:17:53:45 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.42.110.255 - - [21/Sep/2025:21:52:32 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
49.7.227.204 - - [22/Sep/2025:01:44:27 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
111.172.249.49 - - [22/Sep/2025:05:29:19 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
216.24.219.223 - - [22/Sep/2025:06:24:41 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:42 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:43 +0700] "GET /wp-content/themes/style.php HTTP/1.1" 301 1074 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:44 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 1065 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:44 +0700] "GET /wp-includes/style.php HTTP/1.1" 301 1068 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:45 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:46 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:46 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:47 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "Go-http-client/1.1"
216.24.219.223 - - [22/Sep/2025:06:24:47 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:48 +0700] "GET /ax.php HTTP/1.1" 301 1053 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:49 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:50 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:50 +0700] "GET /class-t.api.php HTTP/1.1" 301 1062 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:51 +0700] "GET /wpc.php?p= HTTP/1.1" 301 1057 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:52 +0700] "GET /akcc.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:52 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
216.24.219.191 - - [22/Sep/2025:06:24:53 +0700] "GET /fmk.php HTTP/1.1" 301 1054 "-" "Go-http-client/1.1"
13.90.18.188 - - [22/Sep/2025:06:44:03 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:04 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:05 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:05 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:06 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:06 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:07 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:07 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:08 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:08 +0700] "GET /cong.php HTTP/1.1" 301 1018 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:09 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:10 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:10 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:11 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:11 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:12 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:12 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:13 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:13 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:13 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:14 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:15 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:16 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:16 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:17 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:17 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:18 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:18 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:18 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:19 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1036 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:20 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:21 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:21 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:22 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:22 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:23 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:23 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:23 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:24 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:24 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1036 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:25 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:26 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:27 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:27 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:27 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:28 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:28 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:29 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:29 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:30 +0700] "GET /admin/index.php HTTP/1.1" 301 1025 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:31 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:31 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:32 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:32 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:33 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:33 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:34 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:34 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:35 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:35 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:36 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:37 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:38 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:38 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:39 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:39 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:40 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:40 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:42 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:42 +0700] "GET /classsmtps.php HTTP/1.1" 301 1024 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:43 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:44 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:45 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:45 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1067 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:45 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:46 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:46 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:47 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:47 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:48 +0700] "GET /post.php HTTP/1.1" 301 1018 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:49 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:50 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:50 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:50 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:51 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:51 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:52 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:52 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:53 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:53 +0700] "GET /upfile.php HTTP/1.1" 301 1020 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:54 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:55 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:55 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:56 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:56 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:57 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:57 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:58 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:58 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:44:59 +0700] "GET /ini.php HTTP/1.1" 301 1017 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:00 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:00 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:01 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:01 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:02 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:02 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:03 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:03 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:04 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:04 +0700] "GET /mm.php HTTP/1.1" 301 1016 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:05 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:06 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:06 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:07 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:07 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:08 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:08 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:09 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:09 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:10 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1037 "-" "-"
13.90.18.188 - - [22/Sep/2025:06:45:10 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
122.51.104.231 - - [22/Sep/2025:13:13:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.44.10.67 - - [22/Sep/2025:17:11:50 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
64.227.184.171 - - [22/Sep/2025:19:02:47 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:02:58 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:03:10 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:03:18 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:03:26 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:03:35 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.184.171 - - [22/Sep/2025:19:03:43 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
175.27.164.113 - - [22/Sep/2025:21:11:50 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
152.42.142.213 - - [22/Sep/2025:21:37:06 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
152.42.142.213 - - [22/Sep/2025:21:37:06 +0700] "GET /favicon.ico HTTP/1.1" 301 1062 "http://www.jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
167.94.146.54 - - [22/Sep/2025:22:03:11 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
185.247.137.34 - - [23/Sep/2025:00:47:17 +0700] "GET / HTTP/1.1" 301 1014 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
182.44.10.67 - - [23/Sep/2025:01:07:06 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.76.180 - - [23/Sep/2025:01:10:32 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:34 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:35 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:36 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:37 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:39 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.76.180 - - [23/Sep/2025:01:10:39 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
192.141.86.131 - - [23/Sep/2025:01:12:11 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
192.141.86.131 - - [23/Sep/2025:01:12:13 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
205.210.31.134 - - [23/Sep/2025:01:13:24 +0700] "GET / HTTP/1.1" 301 1051 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:31 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:32 +0700] "GET /tcp.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:32 +0700] "GET /jx.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:32 +0700] "GET /vanta.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:33 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:33 +0700] "GET /acxx.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:33 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:34 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:34 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:35 +0700] "GET /CLA.php HTTP/1.1" 301 1017 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:35 +0700] "GET /aa17.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:36 +0700] "GET /wander.php HTTP/1.1" 301 1057 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:36 +0700] "GET /filei.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:37 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:37 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:37 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:38 +0700] "GET /rak.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:38 +0700] "GET /cfile.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:38 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:39 +0700] "GET /ffile.php HTTP/1.1" 301 1019 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:39 +0700] "GET /gold.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:40 +0700] "GET /bless2.php HTTP/1.1" 301 1057 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:40 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:41 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:41 +0700] "GET /xhouf.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:41 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:42 +0700] "GET /slo.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:42 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:43 +0700] "GET /public/wsr2.php HTTP/1.1" 301 1062 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:43 +0700] "GET /sad.php HTTP/1.1" 301 1017 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:44 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:44 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:45 +0700] "GET /an.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:45 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:45 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:46 +0700] "GET /mo.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:46 +0700] "GET /slo.php HTTP/1.1" 301 1054 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:46 +0700] "GET /r4f_1.php HTTP/1.1" 301 1056 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:47 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:47 +0700] "GET /co.php HTTP/1.1" 301 1016 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:48 +0700] "GET /aaaa.php HTTP/1.1" 301 1055 "-" "-"
52.169.13.133 - - [23/Sep/2025:01:53:48 +0700] "GET /good.php HTTP/1.1" 301 1055 "-" "-"
221.229.106.25 - - [23/Sep/2025:05:00:27 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
103.186.30.230 - - [23/Sep/2025:07:45:56 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
162.14.210.15 - - [23/Sep/2025:08:41:47 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
216.24.219.41 - - [23/Sep/2025:09:01:58 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:00 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:00 +0700] "GET /wp-content/themes/style.php HTTP/1.1" 301 1074 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:01 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 1065 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:02 +0700] "GET /wp-includes/style.php HTTP/1.1" 301 1068 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:02 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:03 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:04 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:04 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:05 +0700] "GET /gifclass.php HTTP/1.1" 301 1059 "-" "Go-http-client/1.1"
216.24.219.28 - - [23/Sep/2025:09:02:05 +0700] "GET /bless.php HTTP/1.1" 301 1019 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:07 +0700] "GET /class-t.api.php HTTP/1.1" 301 1062 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:07 +0700] "GET /akcc.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:08 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:09 +0700] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 1083 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:11 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:11 +0700] "GET /zoo.php HTTP/1.1" 301 1054 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:12 +0700] "GET /ax.php HTTP/1.1" 301 1053 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:14 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:14 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "Go-http-client/1.1"
104.234.19.87 - - [23/Sep/2025:09:02:15 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1058 "-" "Go-http-client/1.1"
20.240.88.181 - - [23/Sep/2025:09:05:46 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:47 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:48 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:48 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:48 +0700] "GET /wp- HTTP/1.1" 301 1050 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:49 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:49 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:49 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:50 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:50 +0700] "GET /chosen.php HTTP/1.1" 301 1020 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:51 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:52 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:52 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:53 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:53 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:53 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:54 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:54 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:55 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1031 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:55 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:56 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:56 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:57 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:57 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:58 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:58 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:58 +0700] "GET /gebase.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:59 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:05:59 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:00 +0700] "GET /e.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:01 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:01 +0700] "GET /fi2.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:02 +0700] "GET /filemanager.php? HTTP/1.1" 301 1062 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:02 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:03 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:03 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:03 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:04 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:04 +0700] "GET /jp.php HTTP/1.1" 301 1016 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:05 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:06 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:06 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:07 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:07 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:07 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:08 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:08 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:09 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:09 +0700] "GET /NewFile.php HTTP/1.1" 301 1021 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:10 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:11 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:11 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:11 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:12 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:12 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:12 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:13 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:13 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:14 +0700] "GET /y.php HTTP/1.1" 301 1015 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:14 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:15 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:15 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:16 +0700] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 1082 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:16 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:17 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:17 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:17 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:18 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:18 +0700] "GET /templates/protostar/index.php HTTP/1.1" 301 1039 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:19 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:19 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:20 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:20 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:21 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:21 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:21 +0700] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:22 +0700] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:22 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:23 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:23 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:24 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:24 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:25 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:25 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:25 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:26 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:26 +0700] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 1088 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:27 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:27 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1038 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:28 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:28 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:29 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:29 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:29 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:30 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:30 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:31 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:31 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:31 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1038 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:32 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:33 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:33 +0700] "GET /wp-includes/404.php HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:33 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:34 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:34 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:35 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:35 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:35 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:36 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1040 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:36 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:37 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:37 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:38 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:38 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:39 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:39 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:39 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:40 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:40 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1026 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:41 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:42 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:42 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:42 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:43 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:43 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:43 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:44 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:44 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:45 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1026 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:45 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:46 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:46 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:47 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:47 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:48 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:48 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:48 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:49 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:49 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1041 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:50 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:50 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
20.240.88.181 - - [23/Sep/2025:09:06:51 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
124.226.222.66 - - [23/Sep/2025:12:36:56 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.40.186.63 - - [23/Sep/2025:16:36:55 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.171.115.165 - - [23/Sep/2025:18:46:34 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:35 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:36 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:36 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:37 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:37 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:37 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:38 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:38 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:39 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1046 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:39 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:40 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:40 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:41 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:41 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:41 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:42 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:42 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:43 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:43 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:44 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:45 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:45 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:46 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:46 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:47 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:47 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:48 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:48 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:48 +0700] "GET /index/function.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:49 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:50 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:50 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:51 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:51 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:51 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:52 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:52 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:53 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:53 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1040 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:54 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:54 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:55 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:55 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:56 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:56 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:56 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:57 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:57 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:58 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:59 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:46:59 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:00 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:00 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:01 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:01 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:01 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:02 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:02 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:03 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:03 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:04 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:04 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:05 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:05 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:05 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:06 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:06 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:07 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:07 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1028 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:08 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:08 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:09 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:09 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:10 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:10 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:10 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:11 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:11 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:12 +0700] "GET /alfanew.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:12 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:13 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:13 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:14 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:14 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:15 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:15 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:15 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:16 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:16 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1030 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:17 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:18 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:18 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:18 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:19 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:19 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:20 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:20 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:20 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:21 +0700] "GET /hoot.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:21 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:22 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:23 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:23 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:23 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:24 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:24 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:24 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:25 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:25 +0700] "GET /updates.php HTTP/1.1" 301 1021 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:26 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:27 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:27 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:27 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:28 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:28 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:29 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:29 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:29 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:30 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:30 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:31 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:32 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:32 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:32 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:33 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:33 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:34 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:34 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:34 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:35 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:36 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:36 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:37 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:37 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.171.115.165 - - [23/Sep/2025:18:47:37 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:57 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:57 +0700] "GET /tcp.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:57 +0700] "GET /jx.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:57 +0700] "GET /vanta.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /acxx.php HTTP/1.1" 301 1055 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:58 +0700] "GET /CLA.php HTTP/1.1" 301 1017 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:59 +0700] "GET /aa17.php HTTP/1.1" 301 1055 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:59 +0700] "GET /wander.php HTTP/1.1" 301 1057 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:59 +0700] "GET /filei.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:59 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:32:59 +0700] "GET /gfile.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:00 +0700] "GET /ol.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:00 +0700] "GET /rak.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:00 +0700] "GET /cfile.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:00 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:00 +0700] "GET /ffile.php HTTP/1.1" 301 1019 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /gold.php HTTP/1.1" 301 1055 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /bless2.php HTTP/1.1" 301 1057 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /xhouf.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:01 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:02 +0700] "GET /slo.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:02 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:02 +0700] "GET /public/wsr2.php HTTP/1.1" 301 1062 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:02 +0700] "GET /sad.php HTTP/1.1" 301 1017 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:02 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /an.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /great.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /mo.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:03 +0700] "GET /slo.php HTTP/1.1" 301 1054 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:04 +0700] "GET /r4f_1.php HTTP/1.1" 301 1056 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:04 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:04 +0700] "GET /co.php HTTP/1.1" 301 1016 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:04 +0700] "GET /aaaa.php HTTP/1.1" 301 1055 "-" "-"
4.218.16.62 - - [23/Sep/2025:20:33:05 +0700] "GET /good.php HTTP/1.1" 301 1055 "-" "-"
121.229.185.160 - - [24/Sep/2025:00:32:16 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
182.42.105.144 - - [24/Sep/2025:04:17:55 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
124.222.142.44 - - [24/Sep/2025:07:59:40 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
100.26.57.176 - - [24/Sep/2025:08:25:27 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; Android 11; M2007J3SY) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
186.122.9.78 - - [24/Sep/2025:10:25:03 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
186.122.9.78 - - [24/Sep/2025:10:25:05 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
205.210.31.15 - - [24/Sep/2025:12:23:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
85.203.23.186 - - [24/Sep/2025:13:15:29 +0700] "GET /wp-includes/ID3/license.txt HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
103.186.30.230 - - [24/Sep/2025:15:22:49 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
60.188.57.0 - - [24/Sep/2025:15:35:41 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
52.169.137.124 - - [24/Sep/2025:16:34:16 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:17 +0700] "GET /fast.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:17 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:18 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:18 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:18 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:19 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:19 +0700] "GET /oxshell.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:19 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:20 +0700] "GET /worksec.php HTTP/1.1" 301 1021 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:20 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:21 +0700] "GET /asus.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:21 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:22 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:22 +0700] "GET /ggfi.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:22 +0700] "GET /ot.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:23 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:23 +0700] "GET /al.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:23 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:24 +0700] "GET /info.php HTTP/1.1" 301 1018 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:24 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:25 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:25 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:26 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:26 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:27 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:27 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:27 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:28 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:28 +0700] "GET /asasx.php HTTP/1.1" 301 1019 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:28 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:29 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:30 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:30 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:30 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:31 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:31 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:31 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:32 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:32 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:33 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:33 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:34 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:34 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:34 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:35 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:35 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:35 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:36 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:36 +0700] "GET /wp-admin/ HTTP/1.1" 301 1019 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:37 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:37 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:38 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:38 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:38 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:39 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:39 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:40 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:40 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:40 +0700] "GET /sts.php HTTP/1.1" 301 1017 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:41 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:41 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:42 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:42 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:43 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:43 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:43 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:44 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
52.169.137.124 - - [24/Sep/2025:16:34:44 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
182.44.67.97 - - [24/Sep/2025:19:27:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
185.54.231.61 - - [24/Sep/2025:19:42:32 +0700] "GET /.env HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.54.231.61 - - [24/Sep/2025:19:42:32 +0700] "POST / HTTP/1.1" 301 1014 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
193.32.162.44 - - [24/Sep/2025:20:10:16 +0700] "HEAD / HTTP/1.1" 301 206 "-" "python-requests/2.32.5"
193.32.162.44 - - [24/Sep/2025:20:10:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-requests/2.32.5"
193.32.162.44 - - [24/Sep/2025:20:10:21 +0700] "HEAD /readme.html HTTP/1.1" 301 217 "-" "python-requests/2.32.5"
162.142.125.42 - - [24/Sep/2025:21:29:35 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
110.172.98.2 - - [25/Sep/2025:08:50:50 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
82.156.68.74 - - [25/Sep/2025:10:45:14 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
157.173.122.176 - - [25/Sep/2025:13:51:43 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54"
101.91.148.219 - - [25/Sep/2025:14:33:08 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
223.244.35.77 - - [25/Sep/2025:18:22:59 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
157.66.54.166 - - [25/Sep/2025:18:40:05 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
124.226.222.66 - - [25/Sep/2025:22:22:28 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
201.215.225.33 - - [26/Sep/2025:01:21:04 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
119.96.24.54 - - [26/Sep/2025:02:19:33 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
178.128.48.85 - - [26/Sep/2025:03:38:10 +0700] "GET /assets/global/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:10 +0700] "GET /main/user/assets//kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:10 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/plugins/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /asset/plugins/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /asset//kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/administrator/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /admin/tinymce/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/admin/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /admin/assets/js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/global/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /main/user/assets//kcfinder-3.12/upload.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/kcfinder-3.12/upload.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /assets/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:11 +0700] "GET /asset/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /asset//kcfinder-3.12/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/assets/kcfinder-3.12/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /kcfinder-3.12/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/administrator/kcfinder-3.12/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/admin/js/kcfinder-3.12/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /admin/tinymce/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /admin/kcfinder-3.12/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /js/kcfinder-3.12/upload.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/admin/kcfinder-3.12/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/js/kcfinder-3.12/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /admin/assets/js/ckeditor/kcfinder-3.12/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /ckeditor/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/global/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /main/user/assets/jquery-file-upload/server/php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/jquery-file-upload/server/php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /assets/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /asset/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:12 +0700] "GET /asset/jquery-file-upload/server/php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/plugins/jquery-file-upload HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/assets/jquery-file-upload/server/php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /jquery-file-upload/server/php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /jquery-file-upload HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/administrator/jquery-file-upload HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/admin/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/jquery-file-upload HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /admin/tinymce/plugins/jquery-file-upload HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /admin/jquery-file-upload HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /js/jquery-file-upload HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/admin/jquery-file-upload HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /assets/js/jquery-file-upload HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [26/Sep/2025:03:38:13 +0700] "GET /admin/assets/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
45.148.10.48 - - [26/Sep/2025:04:35:20 +0700] "GET / HTTP/1.1" 301 1010 "-" "-"
167.71.205.130 - - [26/Sep/2025:05:38:33 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.205.130 - - [26/Sep/2025:05:38:35 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.205.130 - - [26/Sep/2025:05:38:40 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.205.130 - - [26/Sep/2025:05:39:08 +0700] "GET /file88.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
167.71.205.130 - - [26/Sep/2025:05:39:15 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
49.7.227.204 - - [26/Sep/2025:05:52:39 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
3.138.185.30 - - [26/Sep/2025:06:42:19 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 zgrab/0.x"
181.32.8.194 - - [26/Sep/2025:10:00:05 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
124.221.245.78 - - [26/Sep/2025:17:17:08 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
66.132.153.142 - - [26/Sep/2025:22:42:16 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
198.235.24.51 - - [26/Sep/2025:23:08:28 +0700] "GET / HTTP/1.1" 301 1051 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
180.242.68.63 - - [26/Sep/2025:23:25:01 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:03 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:04 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:11 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:16 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:20 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:23 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:26 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:27 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:28 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:31 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:34 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:39 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:41 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:44 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:46 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:25:56 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:00 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:04 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:07 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:08 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:11 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:20 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:22 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:25 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:30 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:32 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:35 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:39 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:41 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:44 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:47 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:53 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:58 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:26:59 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:05 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:06 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:08 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:11 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:14 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:17 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:26 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:29 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:32 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:35 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:37 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:40 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:42 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:46 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:47 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:50 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:51 +0700] "GET /assets/css/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:54 +0700] "GET /upload/images/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:27:59 +0700] "GET /img/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:02 +0700] "GET /filemanager/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:05 +0700] "GET /storage/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:05 +0700] "GET /uploads/files/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:13 +0700] "GET /gallery/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:15 +0700] "GET /vendor/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:18 +0700] "GET /uploads/images/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:19 +0700] "GET /files/docs/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:22 +0700] "GET /config/config.kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:25 +0700] "GET /assets/kcfinder/src/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:28 +0700] "GET /data/files/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:32 +0700] "GET /includes/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:34 +0700] "GET /resources/views/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:38 +0700] "GET /upload/files/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:42 +0700] "GET /cache/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:47 +0700] "GET /uploads/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:50 +0700] "GET /library/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:28:53 +0700] "GET /system/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:07 +0700] "GET /js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:13 +0700] "GET /data/upload/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:17 +0700] "GET /tmp/cache/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:20 +0700] "GET /lib/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:24 +0700] "GET /data/file/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:28 +0700] "GET /js/libs/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:32 +0700] "GET /files/data/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:34 +0700] "GET /css/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:36 +0700] "GET /plugins/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:38 +0700] "GET /upload/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:41 +0700] "GET /site/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:45 +0700] "GET /assets/css/admin/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:51 +0700] "GET /uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:54 +0700] "GET /public/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:55 +0700] "GET /upload/uploads/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:56 +0700] "GET /cache/images/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:29:59 +0700] "GET /app/assets/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:00 +0700] "GET /assets/cms/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:06 +0700] "GET /uploads/uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:09 +0700] "GET /css/admin/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:12 +0700] "GET /uploads/files/files/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:16 +0700] "GET /upload/images/images/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:21 +0700] "GET /uploads/data/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:28 +0700] "GET /uploads/images/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:32 +0700] "GET /uploads/images/files/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:34 +0700] "GET /uploads/data/files/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:39 +0700] "GET /ckeditor/kcfinder/upload.phpkcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:44 +0700] "GET /assets/kcfinder/upload.phpckeditor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:46 +0700] "GET /uploads/upload/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:48 +0700] "GET /fileuploads/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:50 +0700] "GET /uploads/images/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:57 +0700] "GET /uploads/upload/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:30:59 +0700] "GET /uploads/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:05 +0700] "GET /assets/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:10 +0700] "GET /uploads/images/upload/images/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:15 +0700] "GET /uploads/images/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:17 +0700] "GET /uploads/images/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:22 +0700] "GET /uploads/files/upload/images/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
180.242.68.63 - - [26/Sep/2025:23:31:31 +0700] "GET /uploads/images/files/upload/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36"
14.215.163.132 - - [27/Sep/2025:01:10:32 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
31.171.130.9 - - [27/Sep/2025:03:20:19 +0700] "GET / HTTP/1.1" 301 1047 "https://ikateub.id/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0"
31.171.130.7 - - [27/Sep/2025:03:20:21 +0700] "GET //news/ HTTP/1.1" 301 1053 "https://ikateub.id/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0"
45.130.202.22 - - [27/Sep/2025:03:59:58 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-requests/2.32.3"
45.130.202.42 - - [27/Sep/2025:04:00:01 +0700] "GET /_profiler/empty/search/results HTTP/1.1" 301 1077 "-" "python-requests/2.32.3"
162.14.197.180 - - [27/Sep/2025:04:56:47 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.14.239 - - [27/Sep/2025:05:25:15 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:25:29 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:25:36 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:25:47 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:26:08 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:26:26 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:05:26:40 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
157.66.54.166 - - [27/Sep/2025:05:54:09 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
157.66.54.166 - - [27/Sep/2025:07:50:05 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
36.111.67.189 - - [27/Sep/2025:08:41:49 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
191.227.234.19 - - [27/Sep/2025:09:49:59 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
36.41.75.167 - - [27/Sep/2025:12:32:34 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
173.239.254.248 - - [27/Sep/2025:13:27:52 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
173.239.254.245 - - [27/Sep/2025:13:27:53 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
139.59.14.239 - - [27/Sep/2025:13:58:19 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:58:28 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:58:38 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:58:47 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:58:54 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:59:04 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [27/Sep/2025:13:59:10 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
182.44.2.148 - - [27/Sep/2025:16:27:03 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.237.87.6 - - [27/Sep/2025:17:02:09 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
129.211.215.233 - - [27/Sep/2025:20:19:49 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.192.52.163 - - [27/Sep/2025:23:55:11 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:11 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:11 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:11 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:12 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:13 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:13 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:13 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:14 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:15 +0700] "GET /moon.php?p= HTTP/1.1" 301 1021 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:15 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:15 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:15 +0700] "GET /karak.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:16 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:17 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:17 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:17 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:17 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /tinny.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:18 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:19 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1023 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:19 +0700] "GET /jlex.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:19 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:19 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:20 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:21 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:21 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:21 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:21 +0700] "GET /sxo.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:22 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:23 +0700] "GET /css.php HTTP/1.1" 301 1017 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:23 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:23 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:23 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:24 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:24 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:24 +0700] "GET /v1.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:24 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:24 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:25 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:25 +0700] "GET /angelV2.php HTTP/1.1" 301 1021 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:25 +0700] "GET /akcc.php?p= HTTP/1.1" 301 1058 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:25 +0700] "GET /406.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:25 +0700] "GET /222.php?p= HTTP/1.1" 301 1057 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:26 +0700] "GET /dlu.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:26 +0700] "GET /jq.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:26 +0700] "GET /ltsxppjj.php HTTP/1.1" 301 1059 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:26 +0700] "GET /xo.php HTTP/1.1" 301 1053 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:26 +0700] "GET /akk.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:27 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:27 +0700] "GET /pass.php HTTP/1.1" 301 1018 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:27 +0700] "GET /asdf.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:27 +0700] "GET /prod/infos.php HTTP/1.1" 301 1061 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /card.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /mlex.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /ant.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:28 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:29 +0700] "GET /view.php HTTP/1.1" 301 1055 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:29 +0700] "GET /5.php HTTP/1.1" 301 1015 "-" "-"
172.192.52.163 - - [27/Sep/2025:23:55:29 +0700] "GET /wpc.php?p= HTTP/1.1" 301 1057 "-" "-"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/global/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /main/user/assets//kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/plugins/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /asset/plugins/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /asset//kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/administrator/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /admin/tinymce/plugins/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/admin/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /admin/assets/js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/global/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /main/user/assets//kcfinder-3.12/upload.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/kcfinder-3.12/upload.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:11 +0700] "GET /assets/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /asset/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /asset//kcfinder-3.12/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /assets/assets/kcfinder-3.12/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /kcfinder-3.12/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /assets/administrator/kcfinder-3.12/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /assets/admin/js/kcfinder-3.12/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /admin/tinymce/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /admin/kcfinder-3.12/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /js/kcfinder-3.12/upload.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /assets/admin/kcfinder-3.12/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /assets/js/kcfinder-3.12/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /admin/assets/js/ckeditor/kcfinder-3.12/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /ckeditor/plugins/kcfinder-3.12/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:12 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /assets/global/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /main/user/assets/jquery-file-upload/server/php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /assets/jquery-file-upload/server/php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /assets/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /asset/plugins/jquery-file-upload/server/php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /asset/jquery-file-upload/server/php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:13 +0700] "GET /assets/plugins/jquery-file-upload HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/assets/jquery-file-upload/server/php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /jquery-file-upload/server/php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /jquery-file-upload HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/administrator/jquery-file-upload HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/admin/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/jquery-file-upload HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /admin/tinymce/plugins/jquery-file-upload HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /admin/jquery-file-upload HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /js/jquery-file-upload HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/admin/jquery-file-upload HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /assets/js/jquery-file-upload HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
178.128.48.85 - - [28/Sep/2025:00:06:14 +0700] "GET /admin/assets/js/jquery-file-upload HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
182.42.104.32 - - [28/Sep/2025:00:19:58 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
167.71.205.130 - - [28/Sep/2025:02:48:57 +0700] "GET /akcc.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:02:49:27 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:02:49:52 +0700] "GET /akcc1.php HTTP/1.1" 301 1056 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:02:50:21 +0700] "GET /akc1.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:02:50:45 +0700] "GET /wpc.php HTTP/1.1" 301 1054 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
36.111.67.189 - - [28/Sep/2025:04:00:06 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.14.239 - - [28/Sep/2025:05:08:13 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:08:22 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:08:29 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:08:37 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:08:45 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:08:54 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:05:09:06 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
132.232.203.74 - - [28/Sep/2025:07:42:46 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
167.71.205.130 - - [28/Sep/2025:07:56:38 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:07:57:02 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:07:57:38 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:07:58:04 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:07:58:32 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:07:59:01 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
54.166.204.135 - - [28/Sep/2025:10:09:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.4 (KHTML like Gecko) Chrome/22.0.1229.79 Safari/537.4"
170.64.194.158 - - [28/Sep/2025:10:55:55 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:03 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:14 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:27 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:38 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:46 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [28/Sep/2025:10:56:56 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
145.220.91.19 - - [28/Sep/2025:14:30:32 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0"
180.102.134.69 - - [28/Sep/2025:15:23:47 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
167.71.205.130 - - [28/Sep/2025:16:21:56 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:16:22:19 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
167.71.205.130 - - [28/Sep/2025:16:22:40 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
35.215.95.174 - - [28/Sep/2025:18:08:55 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36"
205.210.31.170 - - [28/Sep/2025:18:12:39 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
118.195.165.218 - - [28/Sep/2025:19:12:54 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.14.239 - - [28/Sep/2025:21:28:18 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:28:30 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:28:43 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:28:52 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:29:04 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:29:12 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [28/Sep/2025:21:29:22 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
172.192.18.0 - - [28/Sep/2025:23:41:14 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:20 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:20 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:21 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:24 +0700] "GET /filename.php HTTP/1.1" 301 1059 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:25 +0700] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 1099 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:25 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:25 +0700] "GET /admin1.php HTTP/1.1" 301 1057 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:25 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:26 +0700] "GET /wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 1079 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:29 +0700] "GET /function/function.php?p= HTTP/1.1" 301 1034 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:38 +0700] "GET /worksec.php HTTP/1.1" 301 1058 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:41:55 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:07 +0700] "GET /uploads/form3.php HTTP/1.1" 301 1064 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:07 +0700] "GET /wp-crom.php HTTP/1.1" 301 1058 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:08 +0700] "GET /uploads/multi.php HTTP/1.1" 301 1064 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:08 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:16 +0700] "GET /ay.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:32 +0700] "GET /update/nf.php HTTP/1.1" 301 1060 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:34 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:35 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:35 +0700] "GET /wp-includes/0.php HTTP/1.1" 301 1064 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:35 +0700] "GET /berlin.php HTTP/1.1" 301 1057 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:36 +0700] "GET /avaa.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:37 +0700] "GET /minik.php HTTP/1.1" 301 1056 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:37 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:37 +0700] "GET /wp-content/BypassBest.php HTTP/1.1" 301 1072 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:39 +0700] "GET /byp.php HTTP/1.1" 301 1017 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:40 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:43 +0700] "GET /sym403.php HTTP/1.1" 301 1057 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:43 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:44 +0700] "GET /composer.php HTTP/1.1" 301 1059 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:44 +0700] "GET /eror.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:44 +0700] "GET /po.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:44 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:48 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:50 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:50 +0700] "GET /moon.php?p= HTTP/1.1" 301 1021 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:42:54 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:02 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:02 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:02 +0700] "GET /lock360.php?p= HTTP/1.1" 301 1061 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:02 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:02 +0700] "GET /usage-file.php HTTP/1.1" 301 1061 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:03 +0700] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 1076 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:05 +0700] "GET /wp-includes/Requests/Cookie/alfa-rex.php HTTP/1.1" 301 1087 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:05 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:06 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:08 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1037 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:13 +0700] "GET /es.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:13 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:14 +0700] "GET /wp-content/uploads/bootstrap.inc.php HTTP/1.1" 301 1083 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:14 +0700] "GET /images/m.php HTTP/1.1" 301 1059 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:14 +0700] "GET /images/c99.php HTTP/1.1" 301 1061 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:14 +0700] "GET /images/photo.php HTTP/1.1" 301 1063 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:14 +0700] "GET /wp-includes/compats.php HTTP/1.1" 301 1070 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:15 +0700] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 1072 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:15 +0700] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 1079 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:15 +0700] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 1038 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:19 +0700] "GET /images/footer.php HTTP/1.1" 301 1064 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:20 +0700] "GET /wp-includes/block-editor.php HTTP/1.1" 301 1075 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:21 +0700] "GET /wp-admin/js/themes.php HTTP/1.1" 301 1069 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:21 +0700] "GET /wp-content/upgrade/file.php HTTP/1.1" 301 1074 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:21 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:23 +0700] "GET /.well-known/zaza.php HTTP/1.1" 301 1067 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:38 +0700] "GET /images/sendme.php HTTP/1.1" 301 1064 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:42 +0700] "GET /wp-admin/images/singlep.php HTTP/1.1" 301 1074 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:44 +0700] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 1072 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:44 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:45 +0700] "GET /.well-known/zaza.php HTTP/1.1" 301 1067 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:45 +0700] "GET /images/Marvins.php HTTP/1.1" 301 1065 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:45 +0700] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 301 1079 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:46 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:50 +0700] "GET /wp-includes/widgets//include.php HTTP/1.1" 301 1079 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:50 +0700] "GET /terminal.php HTTP/1.1" 301 1022 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:43:53 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:03 +0700] "GET /ioxi002.PhP7 HTTP/1.1" 301 1059 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:17 +0700] "GET /img/5/radio.php HTTP/1.1" 301 1062 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:36 +0700] "GET /wp-includes/sim.php HTTP/1.1" 301 1066 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:36 +0700] "GET /wp-content/plugins/edaewni/index.php HTTP/1.1" 301 1083 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:36 +0700] "GET /wso-x569.php HTTP/1.1" 301 1059 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:36 +0700] "GET /hi.php HTTP/1.1" 301 1053 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:36 +0700] "GET /wp-includes/pomo/secure.php HTTP/1.1" 301 1074 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:37 +0700] "GET /.well-known/acme-challenge/LA.php HTTP/1.1" 301 1080 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:37 +0700] "GET /vendor/nikic/php-parser/parser.php HTTP/1.1" 301 1081 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:37 +0700] "GET /wp-includes//wp-includes/atomlib.php HTTP/1.1" 301 1083 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:38 +0700] "GET /assets/js/wp-config.php HTTP/1.1" 301 1070 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:38 +0700] "GET /2.php HTTP/1.1" 301 1015 "-" "-"
172.192.18.0 - - [28/Sep/2025:23:44:42 +0700] "GET /wp-admin/maint/item.php HTTP/1.1" 301 1070 "-" "-"
172.237.87.6 - - [29/Sep/2025:00:04:07 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
156.146.48.141 - - [29/Sep/2025:02:02:30 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
121.4.97.180 - - [29/Sep/2025:02:56:40 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.14.239 - - [29/Sep/2025:05:01:17 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:01:27 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:01:38 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:01:47 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:01:58 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:02:09 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.14.239 - - [29/Sep/2025:05:02:24 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
60.188.57.0 - - [29/Sep/2025:06:39:16 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
142.93.223.127 - - [29/Sep/2025:07:59:06 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:07 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:08 +0700] "GET /lufix.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /bak.php HTTP/1.1" 301 1017 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:09 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /moon.php HTTP/1.1" 301 1018 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:10 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:11 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /fw.php HTTP/1.1" 301 1016 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:12 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /wp-head.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:13 +0700] "GET /file.php HTTP/1.1" 301 1018 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /assets/css/403.php HTTP/1.1" 301 1065 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 1082 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:14 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 1102 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1050 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 1098 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:15 +0700] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 1087 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /.tmb/class_api.php HTTP/1.1" 301 1065 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 1064 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /wp-admin/dropdown.php HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:16 +0700] "GET /dropdown.php HTTP/1.1" 301 1022 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:17 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1048 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 1084 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 1087 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:18 +0700] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 1087 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 1077 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 1074 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 1076 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /ccx/index.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /wp-content/ccx/index.php HTTP/1.1" 301 1071 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:19 +0700] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 1032 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 1107 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /cjfuns.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:20 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:21 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:21 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:21 +0700] "GET /wp.php HTTP/1.1" 301 1016 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:21 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:21 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 1069 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1108 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:22 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1031 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:23 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:23 +0700] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:23 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:23 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:23 +0700] "GET /alfa-rex.php HTTP/1.1" 301 1059 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 1082 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /images/cloud.php HTTP/1.1" 301 1063 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 1073 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1035 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:24 +0700] "GET /wp-content/gallery/about.php HTTP/1.1" 301 1075 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-content/banners/about.php HTTP/1.1" 301 1075 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 1039 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:25 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:26 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 1075 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1031 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /wp-pano.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:27 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /fm1.php HTTP/1.1" 301 1054 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 1035 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:28 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 1075 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1081 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 1085 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php HTTP/1.1" 301 1130 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1076 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/plugins/wordpress-seo/rk1.php HTTP/1.1" 301 1087 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:29 +0700] "GET /wp-content/plugins/zgdsfagck/rk2.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /wp-admin/css/colors/ocean/Module.php HTTP/1.1" 301 1083 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /erros_run.php HTTP/1.1" 301 1023 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /uploads/k69834253_index.php HTTP/1.1" 301 1074 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /wp-content/plugins/rsquaaj/index4.php HTTP/1.1" 301 1084 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /templates/beez5/mar.php HTTP/1.1" 301 1070 "-" "-"
142.93.223.127 - - [29/Sep/2025:07:59:30 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 1074 "-" "-"
206.189.130.71 - - [29/Sep/2025:09:00:25 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:00:41 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:00:54 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:01:12 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:01:25 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:01:42 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
206.189.130.71 - - [29/Sep/2025:09:01:59 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
43.143.248.236 - - [29/Sep/2025:10:23:47 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
205.210.31.18 - - [29/Sep/2025:11:32:15 +0700] "GET / HTTP/1.1" 301 1051 "-" "-"
20.204.164.126 - - [29/Sep/2025:12:38:47 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:128.0) Gecko/20100101 Firefox/128.0"
162.14.197.180 - - [29/Sep/2025:14:16:46 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
179.108.0.86 - - [29/Sep/2025:17:00:26 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
179.108.0.86 - - [29/Sep/2025:17:00:27 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
180.102.134.69 - - [29/Sep/2025:18:09:57 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
140.143.98.18 - - [29/Sep/2025:22:10:20 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
157.66.54.166 - - [29/Sep/2025:22:22:38 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
157.66.54.166 - - [30/Sep/2025:04:26:54 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
36.41.75.167 - - [30/Sep/2025:05:39:29 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
157.66.54.166 - - [30/Sep/2025:08:58:12 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
129.28.14.231 - - [30/Sep/2025:09:21:56 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
14.172.199.45 - - [30/Sep/2025:09:58:30 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
14.172.199.45 - - [30/Sep/2025:09:58:31 +0700] "POST /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:07:23 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.242 - - [30/Sep/2025:13:07:23 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.242 - - [30/Sep/2025:13:07:24 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.242 - - [30/Sep/2025:13:07:24 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:07:24 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:07:24 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.242 - - [30/Sep/2025:13:07:25 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:07:25 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.242 - - [30/Sep/2025:13:07:25 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.242 - - [30/Sep/2025:13:07:25 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.211 - - [30/Sep/2025:13:07:26 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.211 - - [30/Sep/2025:13:07:26 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:26 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:26 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:27 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:27 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.211 - - [30/Sep/2025:13:07:27 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:27 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.211 - - [30/Sep/2025:13:07:28 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.211 - - [30/Sep/2025:13:07:28 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:28 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:29 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:07:29 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:29 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:29 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:30 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:30 +0700] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:07:30 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.214 - - [30/Sep/2025:13:07:30 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:07:31 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.49 - - [30/Sep/2025:13:07:31 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.49 - - [30/Sep/2025:13:07:31 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.49 - - [30/Sep/2025:13:07:32 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.49 - - [30/Sep/2025:13:07:32 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.49 - - [30/Sep/2025:13:07:32 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.49 - - [30/Sep/2025:13:07:32 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.49 - - [30/Sep/2025:13:07:32 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.49 - - [30/Sep/2025:13:07:33 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.49 - - [30/Sep/2025:13:07:33 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.49 - - [30/Sep/2025:13:07:33 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:34 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.30 - - [30/Sep/2025:13:07:34 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:34 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:34 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:35 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.30 - - [30/Sep/2025:13:07:35 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.30 - - [30/Sep/2025:13:07:35 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:35 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:07:35 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.30 - - [30/Sep/2025:13:07:36 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.67 - - [30/Sep/2025:13:07:36 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.67 - - [30/Sep/2025:13:07:36 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:37 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:37 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:37 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:37 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.67 - - [30/Sep/2025:13:07:38 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.67 - - [30/Sep/2025:13:07:38 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:38 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:07:38 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:39 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:39 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.217 - - [30/Sep/2025:13:07:39 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:39 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.217 - - [30/Sep/2025:13:07:40 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.217 - - [30/Sep/2025:13:07:40 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:40 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:40 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.217 - - [30/Sep/2025:13:07:41 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.217 - - [30/Sep/2025:13:07:41 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.237 - - [30/Sep/2025:13:07:41 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:07:42 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:07:42 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.237 - - [30/Sep/2025:13:07:42 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.237 - - [30/Sep/2025:13:07:42 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.237 - - [30/Sep/2025:13:07:42 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.237 - - [30/Sep/2025:13:07:43 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.237 - - [30/Sep/2025:13:07:43 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.237 - - [30/Sep/2025:13:07:43 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.237 - - [30/Sep/2025:13:07:43 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.74 - - [30/Sep/2025:13:07:44 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.74 - - [30/Sep/2025:13:07:44 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.74 - - [30/Sep/2025:13:07:44 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.74 - - [30/Sep/2025:13:07:45 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.74 - - [30/Sep/2025:13:07:45 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.74 - - [30/Sep/2025:13:07:45 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.74 - - [30/Sep/2025:13:07:45 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.74 - - [30/Sep/2025:13:07:46 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.74 - - [30/Sep/2025:13:07:46 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.74 - - [30/Sep/2025:13:07:46 +0700] "GET /natural.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:48 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:48 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.211 - - [30/Sep/2025:13:07:48 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:48 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:48 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.211 - - [30/Sep/2025:13:07:49 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.211 - - [30/Sep/2025:13:07:49 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.211 - - [30/Sep/2025:13:07:49 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.211 - - [30/Sep/2025:13:07:49 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.211 - - [30/Sep/2025:13:07:50 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.56 - - [30/Sep/2025:13:07:50 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.56 - - [30/Sep/2025:13:07:50 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.56 - - [30/Sep/2025:13:07:51 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.56 - - [30/Sep/2025:13:07:51 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.56 - - [30/Sep/2025:13:07:51 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.56 - - [30/Sep/2025:13:07:51 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.56 - - [30/Sep/2025:13:07:52 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.56 - - [30/Sep/2025:13:07:52 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.56 - - [30/Sep/2025:13:07:52 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.56 - - [30/Sep/2025:13:07:52 +0700] "GET /db.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.209 - - [30/Sep/2025:13:07:54 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:54 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:54 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.209 - - [30/Sep/2025:13:07:54 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:55 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:55 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.209 - - [30/Sep/2025:13:07:55 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:55 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:07:56 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.209 - - [30/Sep/2025:13:07:56 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:56 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:57 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:57 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:57 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:57 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:07:57 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.31 - - [30/Sep/2025:13:07:58 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.31 - - [30/Sep/2025:13:07:58 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.31 - - [30/Sep/2025:13:07:58 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.31 - - [30/Sep/2025:13:07:58 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:07:59 +0700] "GET /css/css.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.75 - - [30/Sep/2025:13:07:59 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.75 - - [30/Sep/2025:13:07:59 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:00 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:00 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:00 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.75 - - [30/Sep/2025:13:08:00 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:01 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.75 - - [30/Sep/2025:13:08:01 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.75 - - [30/Sep/2025:13:08:01 +0700] "GET /adminfuns.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.241 - - [30/Sep/2025:13:08:02 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:02 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:02 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.241 - - [30/Sep/2025:13:08:02 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:03 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.241 - - [30/Sep/2025:13:08:03 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.241 - - [30/Sep/2025:13:08:03 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:03 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:03 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:08:04 +0700] "GET /Marvins.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.220 - - [30/Sep/2025:13:08:04 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.220 - - [30/Sep/2025:13:08:04 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.220 - - [30/Sep/2025:13:08:05 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.220 - - [30/Sep/2025:13:08:05 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.220 - - [30/Sep/2025:13:08:05 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.220 - - [30/Sep/2025:13:08:05 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.220 - - [30/Sep/2025:13:08:06 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.220 - - [30/Sep/2025:13:08:06 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.220 - - [30/Sep/2025:13:08:06 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.220 - - [30/Sep/2025:13:08:06 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:07 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.55 - - [30/Sep/2025:13:08:07 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.55 - - [30/Sep/2025:13:08:07 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:07 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:08 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.55 - - [30/Sep/2025:13:08:08 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:08 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:08 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.55 - - [30/Sep/2025:13:08:09 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.55 - - [30/Sep/2025:13:08:09 +0700] "GET /images/class.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.36 - - [30/Sep/2025:13:08:09 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:09 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.36 - - [30/Sep/2025:13:08:10 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:10 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:10 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:10 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.36 - - [30/Sep/2025:13:08:11 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:11 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:08:11 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.36 - - [30/Sep/2025:13:08:11 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:12 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:12 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.206 - - [30/Sep/2025:13:08:12 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:13 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:13 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.206 - - [30/Sep/2025:13:08:13 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:13 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:14 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:14 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.206 - - [30/Sep/2025:13:08:14 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.41 - - [30/Sep/2025:13:08:15 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.41 - - [30/Sep/2025:13:08:15 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:08:15 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.41 - - [30/Sep/2025:13:08:15 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.41 - - [30/Sep/2025:13:08:15 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:08:16 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:08:16 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.41 - - [30/Sep/2025:13:08:16 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:08:16 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.41 - - [30/Sep/2025:13:08:17 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.51 - - [30/Sep/2025:13:08:17 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:08:17 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:08:18 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.51 - - [30/Sep/2025:13:08:18 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.51 - - [30/Sep/2025:13:08:18 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:08:18 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:08:18 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.51 - - [30/Sep/2025:13:08:19 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:08:19 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.51 - - [30/Sep/2025:13:08:19 +0700] "GET /webdb.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:20 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.75 - - [30/Sep/2025:13:08:20 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:20 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.75 - - [30/Sep/2025:13:08:20 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:21 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:21 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.75 - - [30/Sep/2025:13:08:21 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:21 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:21 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:08:22 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.30 - - [30/Sep/2025:13:08:22 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.30 - - [30/Sep/2025:13:08:22 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.30 - - [30/Sep/2025:13:08:23 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:08:23 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:08:23 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:08:23 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.30 - - [30/Sep/2025:13:08:24 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:08:24 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.30 - - [30/Sep/2025:13:08:24 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.30 - - [30/Sep/2025:13:08:24 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:08:25 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.224 - - [30/Sep/2025:13:08:25 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:08:25 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:08:25 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:08:26 +0700] "GET /wp-links.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.224 - - [30/Sep/2025:13:08:26 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:08:26 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.224 - - [30/Sep/2025:13:08:26 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.224 - - [30/Sep/2025:13:08:27 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.224 - - [30/Sep/2025:13:08:27 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:27 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.251 - - [30/Sep/2025:13:08:28 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:28 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.251 - - [30/Sep/2025:13:08:28 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:28 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.251 - - [30/Sep/2025:13:08:28 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:29 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.251 - - [30/Sep/2025:13:08:29 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:29 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.251 - - [30/Sep/2025:13:08:29 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:08:30 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:08:30 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:08:30 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:08:31 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.54 - - [30/Sep/2025:13:08:31 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:08:31 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:08:31 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.54 - - [30/Sep/2025:13:08:32 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:08:32 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.54 - - [30/Sep/2025:13:08:32 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:33 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.31 - - [30/Sep/2025:13:08:33 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.31 - - [30/Sep/2025:13:08:33 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:33 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:33 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:34 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:34 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:34 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.31 - - [30/Sep/2025:13:08:34 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.31 - - [30/Sep/2025:13:08:35 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.69 - - [30/Sep/2025:13:08:35 +0700] "GET /hehehehe.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.69 - - [30/Sep/2025:13:08:35 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:08:36 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.69 - - [30/Sep/2025:13:08:36 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.69 - - [30/Sep/2025:13:08:36 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:08:36 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:08:37 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:08:37 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.69 - - [30/Sep/2025:13:08:37 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.69 - - [30/Sep/2025:13:08:37 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.37 - - [30/Sep/2025:13:08:38 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.37 - - [30/Sep/2025:13:08:38 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.37 - - [30/Sep/2025:13:08:38 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.37 - - [30/Sep/2025:13:08:38 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.37 - - [30/Sep/2025:13:08:39 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.37 - - [30/Sep/2025:13:08:39 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.37 - - [30/Sep/2025:13:08:39 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.37 - - [30/Sep/2025:13:08:39 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.37 - - [30/Sep/2025:13:08:40 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.37 - - [30/Sep/2025:13:08:40 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.249 - - [30/Sep/2025:13:08:40 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.249 - - [30/Sep/2025:13:08:40 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.249 - - [30/Sep/2025:13:08:41 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.249 - - [30/Sep/2025:13:08:41 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.249 - - [30/Sep/2025:13:08:41 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.249 - - [30/Sep/2025:13:08:41 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.249 - - [30/Sep/2025:13:08:42 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.249 - - [30/Sep/2025:13:08:42 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.249 - - [30/Sep/2025:13:08:42 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.249 - - [30/Sep/2025:13:08:42 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.213 - - [30/Sep/2025:13:08:43 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:43 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:43 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:43 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:44 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:44 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:44 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:44 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:45 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:08:45 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.248 - - [30/Sep/2025:13:08:45 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.248 - - [30/Sep/2025:13:08:46 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.248 - - [30/Sep/2025:13:08:46 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.248 - - [30/Sep/2025:13:08:46 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.248 - - [30/Sep/2025:13:08:46 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.248 - - [30/Sep/2025:13:08:46 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.248 - - [30/Sep/2025:13:08:47 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.248 - - [30/Sep/2025:13:08:47 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.248 - - [30/Sep/2025:13:08:47 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.248 - - [30/Sep/2025:13:08:47 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:48 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:48 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:48 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:49 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
45.131.195.236 - - [30/Sep/2025:13:08:49 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
45.131.195.236 - - [30/Sep/2025:13:08:49 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
45.131.195.236 - - [30/Sep/2025:13:08:50 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:50 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.131.195.236 - - [30/Sep/2025:13:08:50 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:08:50 +0700] "GET /wp-login.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:08:51 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:08:51 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.65 - - [30/Sep/2025:13:08:51 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.65 - - [30/Sep/2025:13:08:52 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:08:52 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.65 - - [30/Sep/2025:13:08:52 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:08:52 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.65 - - [30/Sep/2025:13:08:53 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.65 - - [30/Sep/2025:13:08:53 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:08:53 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.231 - - [30/Sep/2025:13:08:55 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.231 - - [30/Sep/2025:13:08:55 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.231 - - [30/Sep/2025:13:08:55 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.231 - - [30/Sep/2025:13:08:55 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.231 - - [30/Sep/2025:13:08:55 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.231 - - [30/Sep/2025:13:08:56 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.231 - - [30/Sep/2025:13:08:56 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.231 - - [30/Sep/2025:13:08:56 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.231 - - [30/Sep/2025:13:08:56 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.231 - - [30/Sep/2025:13:08:57 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:57 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:57 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:58 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:58 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:58 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.33 - - [30/Sep/2025:13:08:58 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:59 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:59 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.33 - - [30/Sep/2025:13:08:59 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.33 - - [30/Sep/2025:13:08:59 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.45 - - [30/Sep/2025:13:09:00 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.45 - - [30/Sep/2025:13:09:00 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:09:00 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.45 - - [30/Sep/2025:13:09:00 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.45 - - [30/Sep/2025:13:09:01 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.45 - - [30/Sep/2025:13:09:01 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:09:01 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:09:02 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:09:03 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:09:04 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.227 - - [30/Sep/2025:13:09:05 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.227 - - [30/Sep/2025:13:09:05 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.227 - - [30/Sep/2025:13:09:06 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.227 - - [30/Sep/2025:13:09:06 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.227 - - [30/Sep/2025:13:09:06 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.227 - - [30/Sep/2025:13:09:07 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.227 - - [30/Sep/2025:13:09:07 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.227 - - [30/Sep/2025:13:09:07 +0700] "GET /fonts/database.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.227 - - [30/Sep/2025:13:09:07 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.227 - - [30/Sep/2025:13:09:08 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.223 - - [30/Sep/2025:13:09:08 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.223 - - [30/Sep/2025:13:09:08 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:09:09 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.223 - - [30/Sep/2025:13:09:09 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.223 - - [30/Sep/2025:13:09:09 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:09:09 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:09:10 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.223 - - [30/Sep/2025:13:09:10 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.223 - - [30/Sep/2025:13:09:10 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.223 - - [30/Sep/2025:13:09:10 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:11 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.210 - - [30/Sep/2025:13:09:11 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:11 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.210 - - [30/Sep/2025:13:09:11 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:12 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:12 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.210 - - [30/Sep/2025:13:09:12 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:12 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:13 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.210 - - [30/Sep/2025:13:09:13 +0700] "GET /gifclass.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:09:13 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.52 - - [30/Sep/2025:13:09:14 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:09:14 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.52 - - [30/Sep/2025:13:09:14 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:09:14 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.52 - - [30/Sep/2025:13:09:14 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.52 - - [30/Sep/2025:13:09:15 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.52 - - [30/Sep/2025:13:09:15 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:09:15 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.52 - - [30/Sep/2025:13:09:15 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.241 - - [30/Sep/2025:13:09:16 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:16 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:16 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:17 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.241 - - [30/Sep/2025:13:09:17 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:17 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.241 - - [30/Sep/2025:13:09:17 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:18 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.241 - - [30/Sep/2025:13:09:18 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.241 - - [30/Sep/2025:13:09:18 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:09:18 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:09:19 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
45.131.195.236 - - [30/Sep/2025:13:09:19 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.131.195.236 - - [30/Sep/2025:13:09:19 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.131.195.236 - - [30/Sep/2025:13:09:19 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
45.131.195.236 - - [30/Sep/2025:13:09:20 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
45.131.195.236 - - [30/Sep/2025:13:09:20 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:09:20 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:09:20 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
45.131.195.236 - - [30/Sep/2025:13:09:21 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:21 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:21 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:22 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:22 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:22 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.69 - - [30/Sep/2025:13:09:22 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:22 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.69 - - [30/Sep/2025:13:09:23 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.69 - - [30/Sep/2025:13:09:23 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.69 - - [30/Sep/2025:13:09:23 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.64 - - [30/Sep/2025:13:09:24 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.64 - - [30/Sep/2025:13:09:24 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:09:24 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:09:24 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:09:25 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.64 - - [30/Sep/2025:13:09:25 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.64 - - [30/Sep/2025:13:09:25 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:09:25 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.64 - - [30/Sep/2025:13:09:26 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.64 - - [30/Sep/2025:13:09:26 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.61 - - [30/Sep/2025:13:09:26 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.61 - - [30/Sep/2025:13:09:27 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.61 - - [30/Sep/2025:13:09:27 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.61 - - [30/Sep/2025:13:09:27 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.61 - - [30/Sep/2025:13:09:28 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.61 - - [30/Sep/2025:13:09:29 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.61 - - [30/Sep/2025:13:09:30 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.61 - - [30/Sep/2025:13:09:34 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.61 - - [30/Sep/2025:13:09:35 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.61 - - [30/Sep/2025:13:09:36 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:09:38 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:38 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.212 - - [30/Sep/2025:13:09:38 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:39 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.212 - - [30/Sep/2025:13:09:39 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:39 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:39 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.212 - - [30/Sep/2025:13:09:40 +0700] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:40 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:09:40 +0700] "GET /waf_defender.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:42 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:42 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:42 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:42 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:42 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.50 - - [30/Sep/2025:13:09:43 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:09:43 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:09:43 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.50 - - [30/Sep/2025:13:09:43 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:09:44 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.221 - - [30/Sep/2025:13:09:44 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:09:44 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:09:45 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:09:45 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.221 - - [30/Sep/2025:13:09:45 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.221 - - [30/Sep/2025:13:09:45 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.221 - - [30/Sep/2025:13:09:46 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:09:46 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:09:46 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.221 - - [30/Sep/2025:13:09:46 +0700] "GET /css/av.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.239 - - [30/Sep/2025:13:09:47 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.239 - - [30/Sep/2025:13:09:47 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.239 - - [30/Sep/2025:13:09:47 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:09:48 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.239 - - [30/Sep/2025:13:09:48 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.239 - - [30/Sep/2025:13:09:48 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:09:48 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.239 - - [30/Sep/2025:13:09:49 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:09:49 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:09:49 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:50 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.246 - - [30/Sep/2025:13:09:50 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:50 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.246 - - [30/Sep/2025:13:09:51 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:51 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:51 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.246 - - [30/Sep/2025:13:09:51 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.246 - - [30/Sep/2025:13:09:52 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:52 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.246 - - [30/Sep/2025:13:09:52 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.35 - - [30/Sep/2025:13:09:53 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.35 - - [30/Sep/2025:13:09:53 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.35 - - [30/Sep/2025:13:09:53 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.35 - - [30/Sep/2025:13:09:53 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.35 - - [30/Sep/2025:13:09:54 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.35 - - [30/Sep/2025:13:09:54 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.35 - - [30/Sep/2025:13:09:54 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.35 - - [30/Sep/2025:13:09:54 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.35 - - [30/Sep/2025:13:09:55 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.35 - - [30/Sep/2025:13:09:55 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.67 - - [30/Sep/2025:13:09:55 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.67 - - [30/Sep/2025:13:09:56 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:09:56 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:09:56 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:09:56 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.67 - - [30/Sep/2025:13:09:56 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:09:57 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.67 - - [30/Sep/2025:13:09:57 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.67 - - [30/Sep/2025:13:09:57 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.67 - - [30/Sep/2025:13:09:57 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.71 - - [30/Sep/2025:13:09:58 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.71 - - [30/Sep/2025:13:09:58 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:09:58 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:09:59 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:09:59 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.71 - - [30/Sep/2025:13:09:59 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.71 - - [30/Sep/2025:13:09:59 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.71 - - [30/Sep/2025:13:10:00 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:10:00 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.71 - - [30/Sep/2025:13:10:00 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:01 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.32 - - [30/Sep/2025:13:10:01 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:02 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.32 - - [30/Sep/2025:13:10:02 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.32 - - [30/Sep/2025:13:10:03 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:04 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:06 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:06 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.32 - - [30/Sep/2025:13:10:07 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:10:07 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.57 - - [30/Sep/2025:13:10:08 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.57 - - [30/Sep/2025:13:10:08 +0700] "GET /memberfuns.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:08 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.57 - - [30/Sep/2025:13:10:09 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:09 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:09 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:09 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.57 - - [30/Sep/2025:13:10:10 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:10 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:10:10 +0700] "GET /nation.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:12 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.54 - - [30/Sep/2025:13:10:12 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:12 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.54 - - [30/Sep/2025:13:10:13 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:13 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.54 - - [30/Sep/2025:13:10:13 +0700] "GET /admin-footer.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:10:13 +0700] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:14 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:10:14 +0700] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:14 +0700] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.59 - - [30/Sep/2025:13:10:14 +0700] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.59 - - [30/Sep/2025:13:10:15 +0700] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.59 - - [30/Sep/2025:13:10:15 +0700] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.59 - - [30/Sep/2025:13:10:16 +0700] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.59 - - [30/Sep/2025:13:10:16 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.59 - - [30/Sep/2025:13:10:16 +0700] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.59 - - [30/Sep/2025:13:10:17 +0700] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.59 - - [30/Sep/2025:13:10:17 +0700] "GET /css/media-widget-vide02.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.59 - - [30/Sep/2025:13:10:17 +0700] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.59 - - [30/Sep/2025:13:10:17 +0700] "GET /images/buy.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.66 - - [30/Sep/2025:13:10:18 +0700] "GET /templates/beez3/av.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.66 - - [30/Sep/2025:13:10:18 +0700] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.66 - - [30/Sep/2025:13:10:18 +0700] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.66 - - [30/Sep/2025:13:10:19 +0700] "GET /plugins/function.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.66 - - [30/Sep/2025:13:10:19 +0700] "GET /.well-known/header.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.66 - - [30/Sep/2025:13:10:19 +0700] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.66 - - [30/Sep/2025:13:10:19 +0700] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.66 - - [30/Sep/2025:13:10:20 +0700] "GET /autoload_classmap/install.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.66 - - [30/Sep/2025:13:10:20 +0700] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.66 - - [30/Sep/2025:13:10:21 +0700] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.228 - - [30/Sep/2025:13:10:22 +0700] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.228 - - [30/Sep/2025:13:10:22 +0700] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:22 +0700] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.228 - - [30/Sep/2025:13:10:23 +0700] "GET /wp-includes/Text/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:23 +0700] "GET /xex.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.228 - - [30/Sep/2025:13:10:23 +0700] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:23 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.228 - - [30/Sep/2025:13:10:24 +0700] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.228 - - [30/Sep/2025:13:10:24 +0700] "GET /upload/install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.228 - - [30/Sep/2025:13:10:24 +0700] "GET /wp-head.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.230 - - [30/Sep/2025:13:10:25 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.230 - - [30/Sep/2025:13:10:25 +0700] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.230 - - [30/Sep/2025:13:10:25 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.230 - - [30/Sep/2025:13:10:25 +0700] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.230 - - [30/Sep/2025:13:10:26 +0700] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.230 - - [30/Sep/2025:13:10:26 +0700] "GET /images/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.230 - - [30/Sep/2025:13:10:26 +0700] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.230 - - [30/Sep/2025:13:10:26 +0700] "GET /wp-content/edit.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.230 - - [30/Sep/2025:13:10:27 +0700] "GET /.well-known/info.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.230 - - [30/Sep/2025:13:10:27 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:27 +0700] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.228 - - [30/Sep/2025:13:10:28 +0700] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:28 +0700] "GET /xp.php%20 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.228 - - [30/Sep/2025:13:10:28 +0700] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.228 - - [30/Sep/2025:13:10:28 +0700] "GET /wp-content/bypass_1.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.228 - - [30/Sep/2025:13:10:29 +0700] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.228 - - [30/Sep/2025:13:10:29 +0700] "GET /admin/user_data.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.228 - - [30/Sep/2025:13:10:29 +0700] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.228 - - [30/Sep/2025:13:10:29 +0700] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.228 - - [30/Sep/2025:13:10:30 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.44 - - [30/Sep/2025:13:10:30 +0700] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.44 - - [30/Sep/2025:13:10:30 +0700] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.44 - - [30/Sep/2025:13:10:30 +0700] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.44 - - [30/Sep/2025:13:10:31 +0700] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.44 - - [30/Sep/2025:13:10:31 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.44 - - [30/Sep/2025:13:10:31 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.44 - - [30/Sep/2025:13:10:31 +0700] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.44 - - [30/Sep/2025:13:10:32 +0700] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.44 - - [30/Sep/2025:13:10:32 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.44 - - [30/Sep/2025:13:10:32 +0700] "GET /wp-header.php%20 HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:33 +0700] "GET /file.php%20 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.53 - - [30/Sep/2025:13:10:33 +0700] "GET /.tmb/doc.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:33 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:33 +0700] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:34 +0700] "GET /images/install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:34 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:34 +0700] "GET /adminfusm.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:34 +0700] "GET /js/js1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.53 - - [30/Sep/2025:13:10:35 +0700] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.53 - - [30/Sep/2025:13:10:35 +0700] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:10:35 +0700] "GET /images/habhan.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:10:36 +0700] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:10:36 +0700] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.212 - - [30/Sep/2025:13:10:36 +0700] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.212 - - [30/Sep/2025:13:10:36 +0700] "GET /about/function.php%20 HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:10:37 +0700] "GET /routes/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:10:37 +0700] "GET /wp-includes/images/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.212 - - [30/Sep/2025:13:10:37 +0700] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:10:37 +0700] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:10:38 +0700] "GET /f35_SpaceTn.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:39 +0700] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:42 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:43 +0700] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.65 - - [30/Sep/2025:13:10:44 +0700] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:44 +0700] "GET /wp-includes/category-double.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.65 - - [30/Sep/2025:13:10:44 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:44 +0700] "GET /blog/signatur.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:45 +0700] "GET /wp-includes/assets/db.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:45 +0700] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:10:45 +0700] "GET /include/install.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.54 - - [30/Sep/2025:13:10:46 +0700] "GET /gm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:46 +0700] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.54 - - [30/Sep/2025:13:10:46 +0700] "GET /js/content-type.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.54 - - [30/Sep/2025:13:10:46 +0700] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:10:47 +0700] "GET /about/goods.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:47 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.54 - - [30/Sep/2025:13:10:47 +0700] "GET /function/goods.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.54 - - [30/Sep/2025:13:10:47 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.54 - - [30/Sep/2025:13:10:48 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:10:48 +0700] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:48 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:49 +0700] "GET /plugin-install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:49 +0700] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:49 +0700] "GET /wp-admin/js/load.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.51 - - [30/Sep/2025:13:10:49 +0700] "GET /images/firewall.php7 HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.51 - - [30/Sep/2025:13:10:50 +0700] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.51 - - [30/Sep/2025:13:10:50 +0700] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:50 +0700] "GET /wp-includes/as.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:50 +0700] "GET /wp-content/item.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:51 +0700] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:51 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:51 +0700] "GET /wp-includes/customize/db.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.51 - - [30/Sep/2025:13:10:52 +0700] "GET /css/fan.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:52 +0700] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.51 - - [30/Sep/2025:13:10:52 +0700] "GET /images/mah.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:52 +0700] "GET /wp-content/waf_defender.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:53 +0700] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.51 - - [30/Sep/2025:13:10:53 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:10:53 +0700] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.51 - - [30/Sep/2025:13:10:53 +0700] "GET /wp-content/content.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.232 - - [30/Sep/2025:13:10:54 +0700] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.232 - - [30/Sep/2025:13:10:54 +0700] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.232 - - [30/Sep/2025:13:10:54 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.232 - - [30/Sep/2025:13:10:54 +0700] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.232 - - [30/Sep/2025:13:10:55 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.232 - - [30/Sep/2025:13:10:55 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.232 - - [30/Sep/2025:13:10:55 +0700] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.232 - - [30/Sep/2025:13:10:55 +0700] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.232 - - [30/Sep/2025:13:10:56 +0700] "GET /css/as.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.232 - - [30/Sep/2025:13:10:56 +0700] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.41 - - [30/Sep/2025:13:10:56 +0700] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:10:57 +0700] "GET /wsax.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:10:57 +0700] "GET /bless.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.41 - - [30/Sep/2025:13:10:57 +0700] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:10:57 +0700] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:10:58 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.41 - - [30/Sep/2025:13:10:58 +0700] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.41 - - [30/Sep/2025:13:10:58 +0700] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:10:58 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.41 - - [30/Sep/2025:13:10:59 +0700] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.32 - - [30/Sep/2025:13:10:59 +0700] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.32 - - [30/Sep/2025:13:10:59 +0700] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:11:00 +0700] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.32 - - [30/Sep/2025:13:11:00 +0700] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.32 - - [30/Sep/2025:13:11:00 +0700] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.32 - - [30/Sep/2025:13:11:00 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:11:01 +0700] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:11:01 +0700] "GET /uploads/xsec.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:11:01 +0700] "GET /images/Marvins.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.32 - - [30/Sep/2025:13:11:01 +0700] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:11:02 +0700] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:11:02 +0700] "GET /wp-content/languages/radio.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:11:02 +0700] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.212 - - [30/Sep/2025:13:11:03 +0700] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:11:03 +0700] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:11:03 +0700] "GET /admin.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.212 - - [30/Sep/2025:13:11:03 +0700] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.212 - - [30/Sep/2025:13:11:04 +0700] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.212 - - [30/Sep/2025:13:11:04 +0700] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.212 - - [30/Sep/2025:13:11:04 +0700] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:05 +0700] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:05 +0700] "GET /wp-admin/network/class.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:05 +0700] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:05 +0700] "GET /wp-includes/ms-file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:06 +0700] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:06 +0700] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.64 - - [30/Sep/2025:13:11:06 +0700] "GET /images/news_event/1.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.64 - - [30/Sep/2025:13:11:06 +0700] "GET /chosen.php%20 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.64 - - [30/Sep/2025:13:11:07 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.64 - - [30/Sep/2025:13:11:07 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:11:07 +0700] "GET /wp-includes/network.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.208 - - [30/Sep/2025:13:11:08 +0700] "GET /page.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:11:08 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:11:08 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.208 - - [30/Sep/2025:13:11:08 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.208 - - [30/Sep/2025:13:11:09 +0700] "GET /wp-content/admin-footer.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.208 - - [30/Sep/2025:13:11:09 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:11:09 +0700] "GET /assets/info.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.208 - - [30/Sep/2025:13:11:09 +0700] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.208 - - [30/Sep/2025:13:11:10 +0700] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.73 - - [30/Sep/2025:13:11:11 +0700] "GET /wp-content/1.php%20 HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.73 - - [30/Sep/2025:13:11:11 +0700] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.73 - - [30/Sep/2025:13:11:12 +0700] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.73 - - [30/Sep/2025:13:11:12 +0700] "GET /wp-includes/assets/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.73 - - [30/Sep/2025:13:11:12 +0700] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.73 - - [30/Sep/2025:13:11:12 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.73 - - [30/Sep/2025:13:11:13 +0700] "GET /images/autoload_classmap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.73 - - [30/Sep/2025:13:11:13 +0700] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.73 - - [30/Sep/2025:13:11:13 +0700] "GET /x/test.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.73 - - [30/Sep/2025:13:11:13 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.54 - - [30/Sep/2025:13:11:14 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:14 +0700] "GET /wp-admin/css/install.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:14 +0700] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.54 - - [30/Sep/2025:13:11:14 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:15 +0700] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.54 - - [30/Sep/2025:13:11:15 +0700] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:15 +0700] "GET /shop.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:15 +0700] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:16 +0700] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.54 - - [30/Sep/2025:13:11:16 +0700] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.243 - - [30/Sep/2025:13:11:16 +0700] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:17 +0700] "GET /wp-admin/user/header.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.243 - - [30/Sep/2025:13:11:17 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.243 - - [30/Sep/2025:13:11:17 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.243 - - [30/Sep/2025:13:11:17 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.243 - - [30/Sep/2025:13:11:18 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.243 - - [30/Sep/2025:13:11:18 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:18 +0700] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.243 - - [30/Sep/2025:13:11:18 +0700] "GET /wp-includes/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.243 - - [30/Sep/2025:13:11:19 +0700] "GET /images/fm.php7 HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.30 - - [30/Sep/2025:13:11:19 +0700] "GET /wp-includes/count.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.30 - - [30/Sep/2025:13:11:19 +0700] "GET /wp-error_log.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:11:20 +0700] "GET /assets/class_update_plugins.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.30 - - [30/Sep/2025:13:11:20 +0700] "GET /wp-admin/network/av.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:11:20 +0700] "GET /templates/beez5/error.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.30 - - [30/Sep/2025:13:11:20 +0700] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:11:21 +0700] "GET /js/firewall.php7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:11:21 +0700] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.30 - - [30/Sep/2025:13:11:21 +0700] "GET /assets/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.30 - - [30/Sep/2025:13:11:21 +0700] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.75 - - [30/Sep/2025:13:11:22 +0700] "GET /images/stories/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:22 +0700] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:22 +0700] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:23 +0700] "GET /home/O-Simple.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:23 +0700] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:23 +0700] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.75 - - [30/Sep/2025:13:11:23 +0700] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:24 +0700] "GET /style.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.75 - - [30/Sep/2025:13:11:24 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.75 - - [30/Sep/2025:13:11:24 +0700] "GET /wp-content/themes/av.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.213 - - [30/Sep/2025:13:11:26 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.213 - - [30/Sep/2025:13:11:26 +0700] "GET /saka.phP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:27 +0700] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:27 +0700] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.213 - - [30/Sep/2025:13:11:27 +0700] "GET /baxa1.php7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:27 +0700] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:28 +0700] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:28 +0700] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.213 - - [30/Sep/2025:13:11:28 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.213 - - [30/Sep/2025:13:11:28 +0700] "GET /about/install.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:29 +0700] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:29 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.214 - - [30/Sep/2025:13:11:29 +0700] "GET /images/av.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:30 +0700] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:30 +0700] "GET /js/mrx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.214 - - [30/Sep/2025:13:11:30 +0700] "GET /wp-includes/colour.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:11:30 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:31 +0700] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:31 +0700] "GET /wp-includes/images/include.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.214 - - [30/Sep/2025:13:11:31 +0700] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:32 +0700] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.214 - - [30/Sep/2025:13:11:32 +0700] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:32 +0700] "GET /upload/bilder/cong.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:11:32 +0700] "GET /fonts/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:32 +0700] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:33 +0700] "GET /entrepreneuse.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.214 - - [30/Sep/2025:13:11:33 +0700] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.214 - - [30/Sep/2025:13:11:33 +0700] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:11:33 +0700] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.214 - - [30/Sep/2025:13:11:34 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:34 +0700] "GET /js/db.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:34 +0700] "GET /.well-known/buy.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.36 - - [30/Sep/2025:13:11:35 +0700] "GET /index/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:35 +0700] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:35 +0700] "GET /function/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:35 +0700] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.36 - - [30/Sep/2025:13:11:36 +0700] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.36 - - [30/Sep/2025:13:11:36 +0700] "GET /testt.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:36 +0700] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.36 - - [30/Sep/2025:13:11:36 +0700] "GET /wp-admin/js/sad.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:37 +0700] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:37 +0700] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.41 - - [30/Sep/2025:13:11:37 +0700] "GET /web/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:38 +0700] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.41 - - [30/Sep/2025:13:11:38 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:38 +0700] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:38 +0700] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.41 - - [30/Sep/2025:13:11:39 +0700] "GET /wikindex.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.41 - - [30/Sep/2025:13:11:39 +0700] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:11:39 +0700] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:40 +0700] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:40 +0700] "GET /wp-content/as.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:40 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.243 - - [30/Sep/2025:13:11:40 +0700] "GET /wp-includes/js/simi.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:41 +0700] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.243 - - [30/Sep/2025:13:11:41 +0700] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:41 +0700] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:41 +0700] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.243 - - [30/Sep/2025:13:11:42 +0700] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.243 - - [30/Sep/2025:13:11:42 +0700] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
45.131.195.237 - - [30/Sep/2025:13:11:42 +0700] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
45.131.195.237 - - [30/Sep/2025:13:11:43 +0700] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
45.131.195.237 - - [30/Sep/2025:13:11:43 +0700] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
45.131.195.237 - - [30/Sep/2025:13:11:43 +0700] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.131.195.237 - - [30/Sep/2025:13:11:43 +0700] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
45.131.195.237 - - [30/Sep/2025:13:11:44 +0700] "GET /wp-content/alam.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
45.131.195.237 - - [30/Sep/2025:13:11:44 +0700] "GET /css/adminfusm.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.131.195.237 - - [30/Sep/2025:13:11:44 +0700] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
45.131.195.237 - - [30/Sep/2025:13:11:44 +0700] "GET /wp-content/raw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
45.131.195.237 - - [30/Sep/2025:13:11:45 +0700] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:45 +0700] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:45 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.65 - - [30/Sep/2025:13:11:46 +0700] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:46 +0700] "GET /wp-admin/media-new.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:46 +0700] "GET /media-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.65 - - [30/Sep/2025:13:11:46 +0700] "GET /js/class_api.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.65 - - [30/Sep/2025:13:11:47 +0700] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:47 +0700] "GET /admin/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:47 +0700] "GET /wp-includes/plugin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:11:47 +0700] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.62 - - [30/Sep/2025:13:11:49 +0700] "GET /wp-admin/js/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.62 - - [30/Sep/2025:13:11:49 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.62 - - [30/Sep/2025:13:11:50 +0700] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.62 - - [30/Sep/2025:13:11:50 +0700] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.62 - - [30/Sep/2025:13:11:50 +0700] "GET /uploads/function.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.62 - - [30/Sep/2025:13:11:50 +0700] "GET /assets/js/doc.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.62 - - [30/Sep/2025:13:11:51 +0700] "GET /assets/comfunctions.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.62 - - [30/Sep/2025:13:11:51 +0700] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.62 - - [30/Sep/2025:13:11:51 +0700] "GET /css/adminfus.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.62 - - [30/Sep/2025:13:11:51 +0700] "GET /adminfus.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.242 - - [30/Sep/2025:13:11:52 +0700] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.242 - - [30/Sep/2025:13:11:52 +0700] "GET /images/as.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.242 - - [30/Sep/2025:13:11:52 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:52 +0700] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:53 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:53 +0700] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:53 +0700] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:53 +0700] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.242 - - [30/Sep/2025:13:11:54 +0700] "GET /css/install.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.242 - - [30/Sep/2025:13:11:54 +0700] "GET /assets/av.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.52 - - [30/Sep/2025:13:11:54 +0700] "GET /autoload_classmap/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.52 - - [30/Sep/2025:13:11:55 +0700] "GET /wp-configs.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:11:55 +0700] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.52 - - [30/Sep/2025:13:11:55 +0700] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.52 - - [30/Sep/2025:13:11:55 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.52 - - [30/Sep/2025:13:11:56 +0700] "GET /wp-admin/item.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.52 - - [30/Sep/2025:13:11:56 +0700] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:11:56 +0700] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.52 - - [30/Sep/2025:13:11:56 +0700] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.52 - - [30/Sep/2025:13:11:57 +0700] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:11:57 +0700] "GET /ms-users.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:11:57 +0700] "GET /wp-admin/js/cc.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.50 - - [30/Sep/2025:13:11:58 +0700] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:11:58 +0700] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:11:58 +0700] "GET /css/file.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:11:58 +0700] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.50 - - [30/Sep/2025:13:11:59 +0700] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.50 - - [30/Sep/2025:13:11:59 +0700] "GET /assets/content.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.50 - - [30/Sep/2025:13:11:59 +0700] "GET /fm.php%20 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.50 - - [30/Sep/2025:13:11:59 +0700] "GET /wp-content/goods.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.34 - - [30/Sep/2025:13:12:00 +0700] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.34 - - [30/Sep/2025:13:12:00 +0700] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.34 - - [30/Sep/2025:13:12:00 +0700] "GET /assets/images/cloud.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.34 - - [30/Sep/2025:13:12:01 +0700] "GET /wp-includes/log.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.34 - - [30/Sep/2025:13:12:01 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.34 - - [30/Sep/2025:13:12:01 +0700] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.34 - - [30/Sep/2025:13:12:01 +0700] "GET /wp-includes/aw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.34 - - [30/Sep/2025:13:12:02 +0700] "GET /update/gely.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.34 - - [30/Sep/2025:13:12:02 +0700] "GET /uploads/c99shell.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.34 - - [30/Sep/2025:13:12:02 +0700] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.224 - - [30/Sep/2025:13:12:03 +0700] "GET /uploads/lala.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.224 - - [30/Sep/2025:13:12:03 +0700] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:12:03 +0700] "GET /wp-includes/css/install.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.224 - - [30/Sep/2025:13:12:03 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.224 - - [30/Sep/2025:13:12:04 +0700] "GET /top.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.224 - - [30/Sep/2025:13:12:04 +0700] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.224 - - [30/Sep/2025:13:12:04 +0700] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.224 - - [30/Sep/2025:13:12:04 +0700] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.224 - - [30/Sep/2025:13:12:05 +0700] "GET /wp-content/click.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.224 - - [30/Sep/2025:13:12:05 +0700] "GET /wp-includes/template-less.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.63 - - [30/Sep/2025:13:12:05 +0700] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.63 - - [30/Sep/2025:13:12:06 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.63 - - [30/Sep/2025:13:12:06 +0700] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.63 - - [30/Sep/2025:13:12:06 +0700] "GET /retu11.PhP7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.63 - - [30/Sep/2025:13:12:06 +0700] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.63 - - [30/Sep/2025:13:12:07 +0700] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.63 - - [30/Sep/2025:13:12:07 +0700] "GET /js/1.php7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.63 - - [30/Sep/2025:13:12:07 +0700] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.63 - - [30/Sep/2025:13:12:07 +0700] "GET /wp-includes/assets/min.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.63 - - [30/Sep/2025:13:12:08 +0700] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.215 - - [30/Sep/2025:13:12:08 +0700] "GET /backup/autoload_classmap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.215 - - [30/Sep/2025:13:12:08 +0700] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.215 - - [30/Sep/2025:13:12:09 +0700] "GET /wp-includes/file.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.215 - - [30/Sep/2025:13:12:09 +0700] "GET /wp-content/themes.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.215 - - [30/Sep/2025:13:12:09 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.215 - - [30/Sep/2025:13:12:09 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.215 - - [30/Sep/2025:13:12:10 +0700] "GET /wp-includes/load.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.215 - - [30/Sep/2025:13:12:10 +0700] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.215 - - [30/Sep/2025:13:12:10 +0700] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.215 - - [30/Sep/2025:13:12:10 +0700] "GET /images/c99.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.71 - - [30/Sep/2025:13:12:11 +0700] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:11 +0700] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:11 +0700] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:12 +0700] "GET /setup-config.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:12 +0700] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.71 - - [30/Sep/2025:13:12:12 +0700] "GET /wp-content/uploads/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:12 +0700] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:12 +0700] "GET /type.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.71 - - [30/Sep/2025:13:12:13 +0700] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.71 - - [30/Sep/2025:13:12:13 +0700] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
209.87.169.245 - - [30/Sep/2025:13:12:14 +0700] "GET /as/function.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:12:14 +0700] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.245 - - [30/Sep/2025:13:12:14 +0700] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.245 - - [30/Sep/2025:13:12:15 +0700] "GET /css/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:12:15 +0700] "GET /css/hekokstyle.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:12:15 +0700] "GET /wp-admin/user/file.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.245 - - [30/Sep/2025:13:12:15 +0700] "GET /files/shares/403ws.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.245 - - [30/Sep/2025:13:12:16 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:12:16 +0700] "GET /images/fix.php7 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:12:16 +0700] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:12:17 +0700] "GET /files.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.221 - - [30/Sep/2025:13:12:17 +0700] "GET /wp-includes/assets/system.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.221 - - [30/Sep/2025:13:12:17 +0700] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.221 - - [30/Sep/2025:13:12:17 +0700] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.221 - - [30/Sep/2025:13:12:18 +0700] "GET /images/file.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.221 - - [30/Sep/2025:13:12:18 +0700] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:12:18 +0700] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:12:18 +0700] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:12:19 +0700] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.221 - - [30/Sep/2025:13:12:19 +0700] "GET /img/chat-search.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:12:19 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.209 - - [30/Sep/2025:13:12:20 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:12:20 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.209 - - [30/Sep/2025:13:12:20 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:12:20 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:12:21 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.209 - - [30/Sep/2025:13:12:21 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.209 - - [30/Sep/2025:13:12:21 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.209 - - [30/Sep/2025:13:12:21 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.209 - - [30/Sep/2025:13:12:22 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.235 - - [30/Sep/2025:13:12:22 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.235 - - [30/Sep/2025:13:12:22 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.235 - - [30/Sep/2025:13:12:23 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.235 - - [30/Sep/2025:13:12:23 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.235 - - [30/Sep/2025:13:12:23 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
209.87.169.235 - - [30/Sep/2025:13:12:23 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.235 - - [30/Sep/2025:13:12:24 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.235 - - [30/Sep/2025:13:12:24 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.235 - - [30/Sep/2025:13:12:24 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.235 - - [30/Sep/2025:13:12:24 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.40 - - [30/Sep/2025:13:12:25 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.40 - - [30/Sep/2025:13:12:25 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.40 - - [30/Sep/2025:13:12:25 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.40 - - [30/Sep/2025:13:12:26 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.40 - - [30/Sep/2025:13:12:26 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.40 - - [30/Sep/2025:13:12:26 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.40 - - [30/Sep/2025:13:12:26 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.40 - - [30/Sep/2025:13:12:27 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.40 - - [30/Sep/2025:13:12:27 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.40 - - [30/Sep/2025:13:12:27 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.43 - - [30/Sep/2025:13:12:28 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:28 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.43 - - [30/Sep/2025:13:12:28 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:28 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:29 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:29 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:29 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.43 - - [30/Sep/2025:13:12:29 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:30 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.43 - - [30/Sep/2025:13:12:30 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.72 - - [30/Sep/2025:13:12:30 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.72 - - [30/Sep/2025:13:12:31 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.72 - - [30/Sep/2025:13:12:31 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.72 - - [30/Sep/2025:13:12:31 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.72 - - [30/Sep/2025:13:12:31 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.72 - - [30/Sep/2025:13:12:32 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.72 - - [30/Sep/2025:13:12:32 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.72 - - [30/Sep/2025:13:12:32 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.72 - - [30/Sep/2025:13:12:32 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.72 - - [30/Sep/2025:13:12:33 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:33 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
119.45.20.16 - - [30/Sep/2025:13:12:34 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
209.87.169.65 - - [30/Sep/2025:13:12:34 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:34 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.65 - - [30/Sep/2025:13:12:34 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:34 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:35 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:35 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.65 - - [30/Sep/2025:13:12:35 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.65 - - [30/Sep/2025:13:12:35 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.65 - - [30/Sep/2025:13:12:36 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.38 - - [30/Sep/2025:13:12:36 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.38 - - [30/Sep/2025:13:12:36 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.38 - - [30/Sep/2025:13:12:37 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.38 - - [30/Sep/2025:13:12:37 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.38 - - [30/Sep/2025:13:12:37 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.38 - - [30/Sep/2025:13:12:37 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.38 - - [30/Sep/2025:13:12:38 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.38 - - [30/Sep/2025:13:12:38 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.38 - - [30/Sep/2025:13:12:38 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.38 - - [30/Sep/2025:13:12:38 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:12:40 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.45 - - [30/Sep/2025:13:12:40 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.45 - - [30/Sep/2025:13:12:40 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:12:41 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.45 - - [30/Sep/2025:13:12:41 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.45 - - [30/Sep/2025:13:12:41 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.45 - - [30/Sep/2025:13:12:41 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:12:42 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:12:42 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.45 - - [30/Sep/2025:13:12:42 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
209.87.169.42 - - [30/Sep/2025:13:12:43 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.42 - - [30/Sep/2025:13:12:43 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.42 - - [30/Sep/2025:13:12:43 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.42 - - [30/Sep/2025:13:12:44 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.42 - - [30/Sep/2025:13:12:44 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.42 - - [30/Sep/2025:13:12:44 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.42 - - [30/Sep/2025:13:12:44 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.42 - - [30/Sep/2025:13:12:45 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.42 - - [30/Sep/2025:13:12:45 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.42 - - [30/Sep/2025:13:12:45 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.41 - - [30/Sep/2025:13:12:47 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.41 - - [30/Sep/2025:13:12:47 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:12:47 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
209.87.169.41 - - [30/Sep/2025:13:12:48 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:12:48 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.41 - - [30/Sep/2025:13:12:48 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:12:48 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.41 - - [30/Sep/2025:13:12:49 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:12:49 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.41 - - [30/Sep/2025:13:12:49 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.253 - - [30/Sep/2025:13:12:50 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.253 - - [30/Sep/2025:13:12:50 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.253 - - [30/Sep/2025:13:12:50 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.253 - - [30/Sep/2025:13:12:51 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.253 - - [30/Sep/2025:13:12:51 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.253 - - [30/Sep/2025:13:12:51 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
209.87.169.253 - - [30/Sep/2025:13:12:52 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.253 - - [30/Sep/2025:13:12:52 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.253 - - [30/Sep/2025:13:12:52 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.253 - - [30/Sep/2025:13:12:52 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.223 - - [30/Sep/2025:13:12:53 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:12:53 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.223 - - [30/Sep/2025:13:12:54 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.223 - - [30/Sep/2025:13:12:54 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.223 - - [30/Sep/2025:13:12:54 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:12:54 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.223 - - [30/Sep/2025:13:12:55 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:12:55 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.223 - - [30/Sep/2025:13:12:55 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
209.87.169.223 - - [30/Sep/2025:13:12:55 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.51 - - [30/Sep/2025:13:12:56 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.51 - - [30/Sep/2025:13:12:56 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.51 - - [30/Sep/2025:13:12:56 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.51 - - [30/Sep/2025:13:12:57 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:12:57 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:12:57 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:12:57 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.51 - - [30/Sep/2025:13:12:58 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.51 - - [30/Sep/2025:13:12:58 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.51 - - [30/Sep/2025:13:12:58 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:12:59 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:12:59 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.208 - - [30/Sep/2025:13:12:59 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.208 - - [30/Sep/2025:13:12:59 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:00 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:00 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:00 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:00 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:01 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.208 - - [30/Sep/2025:13:13:01 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.245 - - [30/Sep/2025:13:13:03 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:03 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:03 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:04 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.245 - - [30/Sep/2025:13:13:04 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.245 - - [30/Sep/2025:13:13:04 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:04 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.245 - - [30/Sep/2025:13:13:05 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:05 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.245 - - [30/Sep/2025:13:13:05 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:06 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:06 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.57 - - [30/Sep/2025:13:13:06 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:06 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
209.87.169.57 - - [30/Sep/2025:13:13:07 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:07 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:07 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.57 - - [30/Sep/2025:13:13:07 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.57 - - [30/Sep/2025:13:13:08 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.57 - - [30/Sep/2025:13:13:08 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:13:08 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
209.87.169.214 - - [30/Sep/2025:13:13:09 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:13:09 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:13:09 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:13:09 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.214 - - [30/Sep/2025:13:13:10 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
209.87.169.214 - - [30/Sep/2025:13:13:10 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:13:10 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
209.87.169.214 - - [30/Sep/2025:13:13:10 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.214 - - [30/Sep/2025:13:13:11 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:13:11 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:13:11 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.239 - - [30/Sep/2025:13:13:12 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:13:12 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.239 - - [30/Sep/2025:13:13:12 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:13:12 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
209.87.169.239 - - [30/Sep/2025:13:13:13 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.239 - - [30/Sep/2025:13:13:13 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.239 - - [30/Sep/2025:13:13:13 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
209.87.169.239 - - [30/Sep/2025:13:13:13 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
209.87.169.237 - - [30/Sep/2025:13:13:14 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
209.87.169.237 - - [30/Sep/2025:13:13:14 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
209.87.169.237 - - [30/Sep/2025:13:13:14 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:13:15 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
209.87.169.237 - - [30/Sep/2025:13:13:15 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:13:15 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:13:15 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.237 - - [30/Sep/2025:13:13:16 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.169.237 - - [30/Sep/2025:13:13:16 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
209.87.169.237 - - [30/Sep/2025:13:13:16 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:21:06 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:21:19 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:21:32 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:21:43 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:21:53 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:22:02 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [30/Sep/2025:13:22:12 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
38.47.36.194 - - [30/Sep/2025:14:30:21 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
118.195.165.218 - - [30/Sep/2025:17:10:07 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
117.33.163.216 - - [30/Sep/2025:21:06:46 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
167.94.138.41 - - [30/Sep/2025:23:01:12 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.36 - - [30/Sep/2025:23:52:25 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
182.44.67.97 - - [01/Oct/2025:00:59:44 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
147.185.132.105 - - [01/Oct/2025:03:55:48 +0700] "GET / HTTP/1.1" 301 1051 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
161.248.179.97 - - [01/Oct/2025:04:48:41 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
161.248.179.97 - - [01/Oct/2025:04:48:42 +0700] "POST / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
161.248.179.97 - - [01/Oct/2025:04:48:44 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.25.1"
132.232.165.4 - - [01/Oct/2025:08:29:03 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
36.111.67.189 - - [01/Oct/2025:12:17:44 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
170.64.194.158 - - [01/Oct/2025:12:48:32 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:48:46 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:49:00 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:49:13 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:49:22 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:49:35 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
170.64.194.158 - - [01/Oct/2025:12:49:44 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
182.42.105.144 - - [01/Oct/2025:16:09:06 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
160.25.72.184 - - [01/Oct/2025:18:43:52 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
160.25.72.184 - - [01/Oct/2025:18:43:53 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
160.25.72.184 - - [01/Oct/2025:18:43:58 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "python-requests/2.25.1"
119.45.20.16 - - [01/Oct/2025:20:07:04 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
3.140.182.19 - - [01/Oct/2025:21:16:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 zgrab/0.x"
23.95.184.98 - - [01/Oct/2025:22:58:50 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0"
45.154.98.144 - - [01/Oct/2025:23:59:56 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
118.89.233.234 - - [02/Oct/2025:00:05:29 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.172.98.2 - - [02/Oct/2025:00:17:56 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.247.137.210 - - [02/Oct/2025:00:36:27 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
195.211.188.77 - - [02/Oct/2025:02:40:37 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:02:40:38 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:02:40:39 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
162.14.197.180 - - [02/Oct/2025:03:55:03 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
192.36.109.96 - - [02/Oct/2025:06:04:40 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5"
192.36.109.117 - - [02/Oct/2025:06:04:42 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5"
122.51.104.231 - - [02/Oct/2025:07:35:24 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
195.211.188.77 - - [02/Oct/2025:12:59:35 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:12:59:36 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:12:59:36 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
52.0.218.206 - - [02/Oct/2025:14:10:20 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:41:50 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 1093 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:41:51 +0700] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 1083 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:41:52 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1081 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:42:06 +0700] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 1076 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:42:11 +0700] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 1098 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.233.82.231 - - [02/Oct/2025:14:42:14 +0700] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 1082 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
222.79.103.59 - - [02/Oct/2025:15:12:23 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
159.65.242.48 - - [02/Oct/2025:17:33:22 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
159.65.242.48 - - [02/Oct/2025:17:33:23 +0700] "GET /favicon.ico HTTP/1.1" 301 1058 "http://jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
195.211.188.77 - - [02/Oct/2025:17:35:12 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:17:35:12 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:17:35:13 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
118.195.153.213 - - [02/Oct/2025:19:07:03 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
4.211.157.187 - - [02/Oct/2025:19:29:55 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:56 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:56 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:57 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:57 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:57 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:58 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:58 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:58 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:59 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:29:59 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:00 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:00 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:00 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:01 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:01 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:01 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:02 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:02 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:02 +0700] "GET /goods.php HTTP/1.1" 301 1019 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:03 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:04 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:04 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:04 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:04 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:05 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:05 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:05 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:06 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:06 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:07 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:07 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:08 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:08 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:08 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:09 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:09 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:09 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:10 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:10 +0700] "GET /wp-setup.php HTTP/1.1" 301 1022 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:10 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
4.211.157.187 - - [02/Oct/2025:19:30:11 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
195.211.188.77 - - [02/Oct/2025:23:03:29 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:23:03:30 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [02/Oct/2025:23:03:30 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
180.102.134.69 - - [02/Oct/2025:23:06:25 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
162.14.197.180 - - [03/Oct/2025:02:58:35 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
117.33.163.216 - - [03/Oct/2025:06:41:10 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:11 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:12 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /assets/css/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /upload/images/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /img/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /filemanager/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /storage/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /uploads/files/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /gallery/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /vendor/assets/kcfinder/upload.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:13 +0700] "GET /uploads/images/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /files/docs/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /config/config.kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /data/files/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /includes/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /resources/views/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /upload/files/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /cache/kcfinder/upload.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /uploads/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /library/kcfinder/upload.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /system/assets/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /data/upload/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /tmp/cache/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /lib/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /data/file/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /js/libs/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /files/data/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /css/kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /plugins/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:14 +0700] "GET /upload/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /site/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /assets/css/admin/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /public/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /upload/uploads/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /cache/images/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /app/assets/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /assets/cms/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /css/admin/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/files/files/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /upload/images/images/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/data/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/images/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/images/files/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/data/files/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /ckeditor/kcfinder/upload.phpkcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /assets/kcfinder/upload.phpckeditor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /uploads/upload/kcfinder/upload.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:15 +0700] "GET /fileuploads/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/images/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/upload/upload/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /assets/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/images/upload/images/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/images/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/images/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/files/upload/images/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /uploads/images/files/upload/kcfinder/upload.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "POST /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "POST /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "POST /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /admin/assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /admin/assets/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /admin/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /admin/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:16 +0700] "GET /plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /blog/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /asset/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /demo/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /demo/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /demo/assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /project/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/filemanager/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/filemanagers/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /asset/filemanager/dialog.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /asset/filemanager/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /asset/filemanagers/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /filemanager/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/admin/js/filemanager/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /admin/assets/filemanager/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /dashboard/assets/filemanager/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /media/filemanager/dialog.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:17 +0700] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /assets/admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /plugins/filemanager/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /contents/filemanager/dialog.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /templates/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /vendor/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /api/vendor/filemanager/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /api/vendor/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /plugins/js/filemanager/dialog.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /js/filemanager/dialog.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /plugin/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /uploads/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /admin/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /admin/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:18 +0700] "GET /admin/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/asset/filemanager/dialog.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/assets/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/js/filemanager/dialog.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/plugin/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /admin/uploads/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /backend/admin/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /backend/admin/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /backend/admin/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /backend/admin/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:19 +0700] "GET /backend/admin/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/asset/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/assets/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/js/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/plugin/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/admin/uploads/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/asset/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/assets/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/plugins/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/js/filemanager/dialog.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/plugin/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:20 +0700] "GET /backend/uploads/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/asset/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/assets/filemanager/dialog.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/plugins/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/js/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/plugin/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /frontend/uploads/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:21 +0700] "GET /public/asset/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/assets/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/plugins/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/js/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/plugin/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /public/uploads/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/asset/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/assets/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/plugins/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/js/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/plugin/filemanager/dialog.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /core/uploads/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:22 +0700] "GET /admina/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/asset/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/assets/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/plugins/filemanager/dialog.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/js/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/plugin/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /admina/uploads/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /cp/filemanager/dialog.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /upload/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /uploads/plugins/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /Uploads/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /Upload/filemanager/dialog.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /assets/backend/js/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:23 +0700] "GET /js/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /js/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /yonetim/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /yonetim/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /system/phpforms/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /novo/admin/assets/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /assets/js-admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /__MACOSX/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /blog/category/js/filemanager/dialog.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /category/js/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /resources/theme/admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /app/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /WebUI/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /Public/lib/metronic/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /update/UserControl/assets/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /site/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /demo/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /theme/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /manager/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /assets/super_admin/vendor/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:24 +0700] "GET /themes/dashboard/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /pixel/photobook/assets/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /support/vendor/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /extranet/assets/js/vendor/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /include/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /assets/frontend/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /php/upload/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /public/site/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /intranet/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /content/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /members/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /app/vendor/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /production/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /web-files/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /clip-one/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /js/plugins/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /Public/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /theme/vendors/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /css/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /assets/js/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:25 +0700] "GET /javascript/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /public/assets/lib/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /static/vendor/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /scripts/filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /public/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /public/vendor/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /static/plugins/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /assets/vendor/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /cms/cms_js/filemanager/dialog.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /static/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /static/js/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /core_web/javascript/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /blueimp-filemanager/dialog.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:26 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:27 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:28 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /assets/css/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /upload/images/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /img/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /filemanager/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /storage/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /uploads/files/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /gallery/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /vendor/assets/kcfinder/upload.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /uploads/images/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /files/docs/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /config/config.kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /data/files/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /includes/kcfinder/upload.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /resources/views/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:29 +0700] "GET /upload/files/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /cache/kcfinder/upload.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /uploads/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /library/kcfinder/upload.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /system/assets/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /js/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /data/upload/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /tmp/cache/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /lib/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /data/file/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /js/libs/kcfinder/upload.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /files/data/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /css/kcfinder/upload.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /plugins/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /upload/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /site/ckeditor/kcfinder/upload.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /assets/css/admin/kcfinder/upload.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /public/kcfinder/upload.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /upload/uploads/kcfinder/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:30 +0700] "GET /cache/images/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /app/assets/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /assets/cms/kcfinder/upload.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/uploads/uploads/kcfinder/upload.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /css/admin/kcfinder/upload.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/files/files/kcfinder/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /upload/images/images/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/data/kcfinder/upload.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/images/upload/kcfinder/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/images/files/kcfinder/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/data/files/kcfinder/upload.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /ckeditor/kcfinder/upload.phpkcfinder/upload.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /assets/kcfinder/upload.phpckeditor/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/upload/kcfinder/upload.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /fileuploads/kcfinder/upload.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/images/images/uploads/kcfinder/upload.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/upload/upload/kcfinder/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /assets/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/images/upload/images/kcfinder/upload.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:31 +0700] "GET /uploads/images/files/uploads/kcfinder/upload.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /uploads/images/uploadfiles/kcfinder/upload.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /uploads/files/upload/images/kcfinder/upload.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /uploads/images/files/upload/kcfinder/upload.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "POST /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "POST /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "POST /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1121 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /admin/assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /admin/assets/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /admin/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /admin/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:32 +0700] "GET /plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /blog/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /asset/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /demo/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /demo/plugin/jquery.filer/php/upload.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /demo/assets/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /project/plugins/jquery.filer/php/upload.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/filemanager/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/filemanagers/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /asset/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /asset/filemanager/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /asset/filemanagers/ HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /filemanager/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/admin/js/filemanager/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /admin/assets/filemanager/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /dashboard/assets/filemanager/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /media/filemanager/dialog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:33 +0700] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /assets/admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /plugins/filemanager/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /contents/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /templates/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /vendor/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /api/vendor/filemanager/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /api/vendor/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /plugins/js/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /js/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /plugin/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /uploads/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /admin/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /admin/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:34 +0700] "GET /admin/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/asset/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/assets/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/js/filemanager/dialog.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/plugin/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /admin/uploads/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/asset/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/assets/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:35 +0700] "GET /backend/admin/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/admin/js/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/admin/plugin/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/admin/uploads/filemanager/dialog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:36 +0700] "GET /backend/asset/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/assets/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/plugins/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/js/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/plugin/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /backend/uploads/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/asset/filemanager/dialog.php HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/assets/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/plugins/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/js/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/plugin/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /frontend/uploads/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:37 +0700] "GET /public/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/asset/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/assets/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/plugins/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/js/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/plugin/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /public/uploads/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/asset/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:38 +0700] "GET /core/assets/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /core/plugins/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /core/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /core/js/filemanager/dialog.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /core/plugin/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /core/uploads/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/asset/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/asset/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/assets/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/asset/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/asset/filemanager/dialog.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/assets/filemanager/dialog.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/plugins/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/plugins/js/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/js/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/plugin/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /admina/uploads/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:39 +0700] "GET /cp/filemanager/dialog.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /upload/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /uploads/plugins/filemanager/dialog.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /Uploads/filemanager/dialog.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /Upload/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /assets/backend/js/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /js/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /js/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /yonetim/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /yonetim/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /system/phpforms/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /novo/admin/assets/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /assets/js-admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /__MACOSX/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /blog/category/js/filemanager/dialog.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /category/js/filemanager/dialog.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /resources/theme/admin/plugins/filemanager/dialog.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /app/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /WebUI/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /Public/lib/metronic/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:40 +0700] "GET /update/UserControl/assets/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /site/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /demo/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /theme/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /manager/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /assets/super_admin/vendor/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /themes/dashboard/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /pixel/photobook/assets/filemanager/dialog.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /support/vendor/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /extranet/assets/js/vendor/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /include/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /assets/frontend/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /php/upload/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /public/site/filemanager/dialog.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /intranet/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /content/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /members/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /app/vendor/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:41 +0700] "GET /production/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /web-files/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /clip-one/assets/plugins/filemanager/dialog.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /js/plugins/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /Public/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /theme/vendors/filemanager/dialog.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /css/assets/global/plugins/filemanager/dialog.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /assets/js/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /javascript/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /public/assets/lib/filemanager/dialog.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /static/vendor/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /scripts/filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /public/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /public/vendor/filemanager/dialog.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /static/plugins/filemanager/dialog.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /assets/vendor/filemanager/dialog.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /cms/cms_js/filemanager/dialog.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /static/filemanager/dialog.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /static/js/filemanager/dialog.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /core_web/javascript/filemanager/dialog.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
103.65.236.212 - - [03/Oct/2025:08:31:42 +0700] "GET /blueimp-filemanager/dialog.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.213.83.233 - - [03/Oct/2025:08:59:45 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
112.35.70.139 - - [03/Oct/2025:09:26:37 +0700] "GET / HTTP/1.1" 301 1051 "-" "Go-http-client/1.1"
106.227.49.113 - - [03/Oct/2025:10:32:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
195.178.110.155 - - [03/Oct/2025:11:33:53 +0700] "GET /.git/config HTTP/1.1" 403 1590 "-" "Go-http-client/1.1"
182.42.111.213 - - [03/Oct/2025:14:21:17 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
196.251.69.32 - - [03/Oct/2025:17:44:59 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
49.232.151.112 - - [03/Oct/2025:18:12:13 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
146.190.93.127 - - [03/Oct/2025:18:22:58 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
146.190.93.127 - - [03/Oct/2025:18:23:00 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
146.190.93.127 - - [03/Oct/2025:18:23:03 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
146.190.93.127 - - [03/Oct/2025:18:23:05 +0700] "GET /file88.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
146.190.93.127 - - [03/Oct/2025:18:23:05 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
113.219.218.197 - - [03/Oct/2025:22:06:57 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
195.248.243.236 - - [03/Oct/2025:22:33:44 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:22:41:36 +0700] "HEAD /wordpress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:22:53:46 +0700] "HEAD /Wordpress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:22:59:23 +0700] "HEAD /WORDPRESS HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:05:19 +0700] "HEAD /WordPress HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:10:55 +0700] "HEAD /wp HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:17:29 +0700] "HEAD /Wp HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:29:07 +0700] "HEAD /WP HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:31:26 +0700] "HEAD /old HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:39:59 +0700] "HEAD /Old HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:44:42 +0700] "HEAD /OLD HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [03/Oct/2025:23:52:41 +0700] "HEAD /oldsite HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:04:20 +0700] "HEAD /new HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:08:58 +0700] "HEAD /New HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:14:46 +0700] "HEAD /NEW HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:22:48 +0700] "HEAD /wp-old HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:25:39 +0700] "HEAD /2022 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:33:51 +0700] "HEAD /2023 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
45.148.10.140 - - [04/Oct/2025:00:39:59 +0700] "GET /.git/config HTTP/1.1" 403 1594 "-" "Go-http-client/1.1"
195.248.243.236 - - [04/Oct/2025:00:40:48 +0700] "HEAD /2024 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:45:33 +0700] "HEAD /2017 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:53:17 +0700] "HEAD /2020 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:00:59:22 +0700] "HEAD /2019 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:09:12 +0700] "HEAD /2018 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:17:08 +0700] "HEAD /backup HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:20:34 +0700] "HEAD /test HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:26:12 +0700] "HEAD /Test HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:36:47 +0700] "HEAD /TEST HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:39:25 +0700] "HEAD /demo HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:48:30 +0700] "HEAD /bc HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:01:56:29 +0700] "HEAD /www HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:01:50 +0700] "HEAD /WWW HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:08:52 +0700] "HEAD /Www HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:12:47 +0700] "HEAD /2021 HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:16:29 +0700] "HEAD /main HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:24:18 +0700] "HEAD /old-site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:32:23 +0700] "HEAD /bk HTTP/1.1" 301 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:37:25 +0700] "HEAD /Backup HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:47:22 +0700] "HEAD /BACKUP HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:48:46 +0700] "HEAD /SHOP HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:02:56:45 +0700] "HEAD /Shop HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:03:07 +0700] "HEAD /shop HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:08:40 +0700] "HEAD /bak HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:16:58 +0700] "HEAD /sitio HTTP/1.1" 301 211 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:18:46 +0700] "HEAD /bac HTTP/1.1" 301 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:28:35 +0700] "HEAD /sito HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:30:35 +0700] "HEAD /site HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:38:46 +0700] "HEAD /Site HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:47:04 +0700] "HEAD /SITE HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
45.154.98.45 - - [04/Oct/2025:03:49:22 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
195.248.243.236 - - [04/Oct/2025:03:50:17 +0700] "HEAD /blog HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:03:59:36 +0700] "HEAD /BLOG HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
195.248.243.236 - - [04/Oct/2025:04:04:43 +0700] "HEAD /Blog HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
198.235.24.179 - - [04/Oct/2025:04:28:10 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"
18.97.14.91 - - [04/Oct/2025:04:55:12 +0700] "GET /robots.txt HTTP/1.1" 301 1057 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
18.97.14.91 - - [04/Oct/2025:04:55:14 +0700] "GET / HTTP/1.1" 301 1047 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
106.119.167.146 - - [04/Oct/2025:05:49:35 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
157.66.54.166 - - [04/Oct/2025:06:18:27 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
114.96.103.33 - - [04/Oct/2025:09:38:28 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
121.4.97.180 - - [04/Oct/2025:13:28:52 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
198.235.24.180 - - [04/Oct/2025:13:31:23 +0700] "GET / HTTP/1.1" 301 1051 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
110.166.71.39 - - [04/Oct/2025:17:25:43 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:44 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /as.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /contact.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-admin/network/natural.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /dashboard.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /wp-content/updates.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:45 +0700] "GET /geju.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:48:46 +0700] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:47 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:47 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:47 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:47 +0700] "GET /lock360.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:48 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:48 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:49 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:49 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:50 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /wp-class.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:51 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:52 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:52 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:48:52 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:52 +0700] "GET /wp-Owl.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /gg.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /eagle.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /lufix.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /ant.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /cux.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:54 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:48:56 +0700] "GET /wp-error.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:56 +0700] "GET /post.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:48:56 +0700] "GET /send.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:48:56 +0700] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:56 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /admin.php?attempt=1 HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:48:57 +0700] "GET /file7.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:48:59 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:01 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /69.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /readme.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:02 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:49:03 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:03 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:03 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:04 +0700] "GET /upload.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /class.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /admin/log.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:05 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:06 +0700] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:06 +0700] "GET /wp-links.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /elp.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /ioxi002.PhP7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /profile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:07 +0700] "GET /users.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:08 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /faiy.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /php8.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /akp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /u.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /NewFile.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /packed.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:09 +0700] "GET /av.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /leaf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /xBrain.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:10 +0700] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:11 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-admin/css/colors/ectoplasm/my1.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /gecko.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /admin/cache.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /admin/resources/dummy/log.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:12 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:13 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:14 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:16 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:16 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:16 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:16 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /xc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /bolt.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:17 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:18 +0700] "GET /randkeyword.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:18 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:19 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:20 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:21 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:21 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:49:21 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:23 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /file-manager.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /wp-includes/wp-load.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:24 +0700] "GET /wp-admin/maint/users.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:25 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:25 +0700] "GET /ja.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:25 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:27 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:27 +0700] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:27 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:27 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:27 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:28 +0700] "GET /as/function.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-admin.phpdiegun.com/autoload_classmap.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /layout.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /baxa1.php7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:29 +0700] "GET /akcc.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /mail.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /leafmailer.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /image-gallery.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:30 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:31 +0700] "GET /file.php?fm=true HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:49:31 +0700] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:31 +0700] "GET /about.php?525 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:31 +0700] "GET /gel4y.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:31 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /admin/WebService/log.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /baxa1.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:32 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:33 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:33 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:33 +0700] "GET /link.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:34 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:36 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:40 +0700] "GET /annt.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:41 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:42 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:43 +0700] "GET /ton.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /man.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /wp-configs.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:44 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:45 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:46 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:46 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:46 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:46 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:46 +0700] "GET /item.php/admin.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:47 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /dz.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /wp-admin/themes.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:48 +0700] "GET /bengi.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /error.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:49 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:50 +0700] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /sb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /BenX/admin.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:51 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /mailer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:52 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /wp-content/themes/404.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /c.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:53 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /flywheel.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /wp-admin/users.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /help.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /man.php7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:54 +0700] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /www.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /admin/include/student.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-logs.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-admin/css/OK.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /db.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:55 +0700] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wp-includes/Requests/src/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /cloud.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /st.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:56 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:57 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:57 +0700] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/user/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/css/go.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /dash.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-content/plugins/fix/custom-plugin.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /bala.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-content/themes/twentytwenty/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /fm1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /he.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/fw.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /01.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /alfanew.php7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /leaf_mailer.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:49:59 +0700] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:50:00 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:50:01 +0700] "GET /abe.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /plugin.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /click.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /blog/fw.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:50:02 +0700] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:04 +0700] "GET /.well-known/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-content/themes/remv.php.INFECTED.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wordpress/about.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /menu.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-includes/mah.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /alf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:07 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:50:08 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:50:09 +0700] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:09 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.171 - - [04/Oct/2025:20:50:11 +0700] "GET /baxa1.phP8 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.171 - - [04/Oct/2025:20:50:12 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:12 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.171 - - [04/Oct/2025:20:50:12 +0700] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:13 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.171 - - [04/Oct/2025:20:50:13 +0700] "GET /inputs.phpdunamisconcept.com.ng/item.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /.well-known/info.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /assets/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wp-head.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /epinyins.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.171 - - [04/Oct/2025:20:50:14 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:16 +0700] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:16 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:16 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:16 +0700] "GET /admin/function.php/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /admin/resources/cache.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /12.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /favicon.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:17 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /contents.php/lv.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:18 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:50:19 +0700] "GET /.well-known/log.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:19 +0700] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:19 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /hi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /lf.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:20 +0700] "GET /wp/abe.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /wp-includes/header.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:21 +0700] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:50:22 +0700] "GET /ynz.PhP7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:50:22 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:23 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:23 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /upload/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /t.php7 HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:24 +0700] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /anj.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /worksec.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:25 +0700] "GET /hehe.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-includes/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /randkeyword.PhP8 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-admin/maint/go.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:26 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /wp-admin/images/file.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /wp-includes/buy.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:27 +0700] "GET /al.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:29 +0700] "GET /.well-known/themes.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:31 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:31 +0700] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:32 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:33 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:33 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:50:34 +0700] "GET /wp-admin/shell.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:34 +0700] "GET /wp-includes/SimplePie/alfa-rex.php8 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:50:35 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:35 +0700] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:35 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:35 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:35 +0700] "GET /server.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /wp-crom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /asus.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:50:36 +0700] "GET /ioxi01.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:37 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:38 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /wp-cache.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /.well-known/as.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /bb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /form.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /alex.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:40 +0700] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-includes/SimplePie/XML/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /h.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /0byte.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /up.php?x= HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /.well-known/xoxo.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:41 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:42 +0700] "GET /7.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:50:42 +0700] "GET /wp-content/themes/twentytwelve/css/alfa-rex.php8 HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:42 +0700] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:50:43 +0700] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:43 +0700] "GET /html_editor.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:50:43 +0700] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:43 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:43 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php8 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:44 +0700] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:44 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:50:44 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:44 +0700] "GET /ws.php7 HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /wp-admin/nciii.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /soap.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /.well-known/upfile.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /.well-known/link.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /bsrdf.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /uploads/up.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /berlin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:45 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /wp-includes/SimplePie/Decode/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /index/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /priv8.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /wp-content/403.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /millo.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:46 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /adminer.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /.well-known/file.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /custom-plugin.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /cron.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /meta.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /test1.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /app.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /browse.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:47 +0700] "GET /files/tinyfilemanager.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /cgyhj.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /lol.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:48 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:50:49 +0700] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:49 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:49 +0700] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /bu5.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:50 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:51 +0700] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:51 +0700] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:51 +0700] "GET /tdgdesr.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:50:51 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:51 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-admin/404.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /acp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:52 +0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /ad.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /cong.phpprotectthekids-co.fireyourpestcompany.com/wp-includes/Text/about.php HTTP/1.1" 301 1123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /xl.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:50:53 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:54 +0700] "GET /wp-content/plugins/fix/xc.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:50:54 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:54 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:54 +0700] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:50:54 +0700] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:50:55 +0700] "GET /d.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:55 +0700] "GET /wp-includes/images/alfa-rex.php8 HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:50:56 +0700] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:56 +0700] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:56 +0700] "GET /wp-includes/unix.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:50:58 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:50:59 +0700] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:00 +0700] "GET /img/5/radio.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:00 +0700] "GET /admin.php/wp-includes/Text/network.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:51:00 +0700] "GET /function/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /jquery.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /owl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /beence.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /wp-content/updraft/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /wp-content/themes/twentytwentythree/parts/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:01 +0700] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /wp-content/themes/twentytwenty/alfa-rex.php8 HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /q.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:02 +0700] "GET /wp-includes/programa_apoyo_editoriales.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:03 +0700] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/bak.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:04 +0700] "GET /wp-includes/Requests/wp-login.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:51:05 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php7 HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:05 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:05 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:06 +0700] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:07 +0700] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:07 +0700] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:07 +0700] "GET /assets/images/niil.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:08 +0700] "GET /alfashell.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:08 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:08 +0700] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:09 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:51:10 +0700] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /files/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:11 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:12 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:12 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:12 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:51:13 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:13 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:51:13 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:13 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /assets/css/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:14 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:16 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:51:16 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:16 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:16 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:51:17 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:18 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:19 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:20 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
156.146.56.133 - - [04/Oct/2025:20:51:20 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:20 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /private/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:21 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-content/up HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /php/ HTTP/1.1" 301 1014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:22 +0700] "GET /plugins/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:23 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:24 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:24 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:25 +0700] "GET /admin/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:51:25 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:26 +0700] "GET /upload/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /modules/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:27 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
156.146.56.133 - - [04/Oct/2025:20:51:28 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:29 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:29 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:30 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:31 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.56.133 - - [04/Oct/2025:20:51:32 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:32 +0700] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:33 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:51:33 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:51:33 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:34 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:35 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:35 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /tinyfilemanager HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:37 +0700] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /img/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:51:38 +0700] "GET /include/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:39 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:39 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /images/stories/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /Site/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:40 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /system/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:41 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:42 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
156.146.56.133 - - [04/Oct/2025:20:51:42 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:42 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:43 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:43 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:44 +0700] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
156.146.56.133 - - [04/Oct/2025:20:51:44 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:45 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:46 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:51:47 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:47 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:51:47 +0700] "GET /docs/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
156.146.56.133 - - [04/Oct/2025:20:51:48 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:48 +0700] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:49 +0700] "GET /backup/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:49 +0700] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:49 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:49 +0700] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:50 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
156.146.56.133 - - [04/Oct/2025:20:51:51 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:51 +0700] "GET /aspera/faspex/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:52 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:53 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-content HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-content/fonts/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
156.146.56.133 - - [04/Oct/2025:20:51:54 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
222.79.104.23 - - [04/Oct/2025:21:20:47 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.172.98.2 - - [05/Oct/2025:03:29:24 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
132.232.165.4 - - [05/Oct/2025:05:05:07 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
205.210.31.11 - - [05/Oct/2025:05:48:39 +0700] "GET / HTTP/1.1" 301 1051 "-" "-"
196.251.87.35 - - [05/Oct/2025:07:06:06 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0"
113.141.91.58 - - [05/Oct/2025:08:46:40 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
223.15.245.170 - - [05/Oct/2025:12:39:55 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
77.237.247.186 - - [05/Oct/2025:13:13:41 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36"
77.237.247.186 - - [05/Oct/2025:13:13:41 +0700] "GET / HTTP/1.1" 301 1047 "-" "Go-http-client/1.1"
77.237.247.186 - - [05/Oct/2025:13:13:42 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36"
77.237.247.186 - - [05/Oct/2025:13:13:42 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36"
77.237.247.186 - - [05/Oct/2025:13:13:43 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36"
77.237.247.186 - - [05/Oct/2025:13:13:43 +0700] "GET /user/login HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0"
77.237.247.186 - - [05/Oct/2025:13:13:43 +0700] "GET /admin HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148"
77.237.247.186 - - [05/Oct/2025:13:13:44 +0700] "GET /login HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148"
77.237.247.186 - - [05/Oct/2025:13:13:44 +0700] "GET /register HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0"
77.237.247.186 - - [05/Oct/2025:13:13:44 +0700] "GET /admin HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148"
77.237.247.186 - - [05/Oct/2025:13:13:45 +0700] "GET /login HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15"
146.190.93.127 - - [05/Oct/2025:22:07:13 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [05/Oct/2025:22:07:20 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [05/Oct/2025:22:07:27 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [05/Oct/2025:22:07:32 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [05/Oct/2025:22:07:37 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [05/Oct/2025:22:07:42 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
182.44.10.67 - - [06/Oct/2025:00:28:36 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.57.63.112 - - [06/Oct/2025:01:12:01 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:02 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:02 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:03 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:03 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:04 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:04 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:04 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:05 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:05 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:06 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:07 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:08 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:08 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:08 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:09 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:09 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:10 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:10 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:10 +0700] "GET /nc4.php HTTP/1.1" 301 1017 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:11 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:12 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:12 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:12 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:13 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:13 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:14 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:14 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:14 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:15 +0700] "GET /wp-good.php HTTP/1.1" 301 1021 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:15 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:16 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:17 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:17 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:17 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:18 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:18 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:19 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:19 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:01:12:19 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
157.173.122.176 - - [06/Oct/2025:01:24:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54"
146.190.93.127 - - [06/Oct/2025:01:48:09 +0700] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 1072 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
146.190.93.127 - - [06/Oct/2025:01:48:17 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 1108 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
203.33.203.148 - - [06/Oct/2025:04:13:33 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.172.98.2 - - [06/Oct/2025:04:40:39 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
49.232.151.112 - - [06/Oct/2025:07:56:52 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
54.197.213.8 - - [06/Oct/2025:09:16:27 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.31 (KHTML like Gecko) Chrome/26.0.1410.63 Safari/537.31"
77.237.247.195 - - [06/Oct/2025:11:58:46 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
138.199.35.5 - - [06/Oct/2025:13:52:15 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
143.110.249.19 - - [06/Oct/2025:13:58:53 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
143.110.249.19 - - [06/Oct/2025:13:58:53 +0700] "GET /favicon.ico HTTP/1.1" 301 1062 "http://www.jkwebsite.my.id/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
182.44.9.147 - - [06/Oct/2025:15:38:28 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.57.63.112 - - [06/Oct/2025:17:59:47 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:48 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:49 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:49 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:50 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:50 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:50 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:51 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:51 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:52 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:52 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:53 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:53 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:54 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:54 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:54 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:55 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:55 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:56 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:56 +0700] "GET /nc4.php HTTP/1.1" 301 1017 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:57 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:57 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:58 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:58 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:58 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:59 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:17:59:59 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:00 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:00 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:00 +0700] "GET /wp-good.php HTTP/1.1" 301 1021 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:01 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:02 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:02 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:03 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:03 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:03 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:04 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:04 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:05 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [06/Oct/2025:18:00:05 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
223.244.35.77 - - [06/Oct/2025:23:35:47 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
181.41.206.111 - - [07/Oct/2025:01:11:18 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
20.171.59.91 - - [07/Oct/2025:02:01:28 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:29 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:29 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:29 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:30 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:30 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:31 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:31 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:31 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:32 +0700] "GET /buy.php HTTP/1.1" 301 1017 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:32 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:33 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:34 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:34 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:35 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:35 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:36 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:36 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:37 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:37 +0700] "GET /goods.php HTTP/1.1" 301 1019 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:38 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:39 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:39 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:41 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:41 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:41 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:42 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:42 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:43 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:43 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1044 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:44 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:44 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:45 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:45 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:46 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:46 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:46 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:47 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:47 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:48 +0700] "GET /wp-setup.php HTTP/1.1" 301 1022 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:48 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.59.91 - - [07/Oct/2025:02:01:49 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
94.191.43.82 - - [07/Oct/2025:03:24:21 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.57.63.112 - - [07/Oct/2025:09:33:33 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:34 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:34 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:35 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:35 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:35 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:36 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:36 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:37 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:37 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:38 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:38 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:39 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:39 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:40 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:40 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:40 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:41 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:41 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:42 +0700] "GET /nc4.php HTTP/1.1" 301 1017 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:42 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:43 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:43 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:44 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:44 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:45 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:45 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:45 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:46 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:46 +0700] "GET /wp-good.php HTTP/1.1" 301 1021 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:47 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:48 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:48 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:48 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:49 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:49 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:50 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:50 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:50 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:09:33:51 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1020 "-" "-"
101.42.117.179 - - [07/Oct/2025:10:59:41 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
185.206.227.243 - - [07/Oct/2025:16:29:44 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:44 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:44 +0700] "GET /O-Simple.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:45 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:45 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:45 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:45 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:45 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:29:46 +0700] "GET /.well-known/login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:46 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:46 +0700] "GET /.wp/wso.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:29:46 +0700] "GET /core.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:29:47 +0700] "GET /robots.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:47 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:47 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:47 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:47 +0700] "GET /file5.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:48 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:48 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:29:48 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:48 +0700] "GET /update/f35.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:48 +0700] "GET /wp-content/hello.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:49 +0700] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:49 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:49 +0700] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:49 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:49 +0700] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:50 +0700] "GET /images/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:50 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:29:50 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:29:50 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:51 +0700] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:51 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:51 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:51 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:51 +0700] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:29:52 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:52 +0700] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:52 +0700] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:52 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:53 +0700] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:53 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:29:53 +0700] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:29:53 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:53 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:54 +0700] "GET /js/bas.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:54 +0700] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:54 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:54 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:54 +0700] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:55 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:29:55 +0700] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:55 +0700] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:55 +0700] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:56 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:57 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:57 +0700] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:57 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:57 +0700] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:29:58 +0700] "GET /inc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:58 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:58 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:29:58 +0700] "GET /cgi-bin/bypass.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:29:58 +0700] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:29:59 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:59 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:29:59 +0700] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:29:59 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:00 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:00 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:00 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:30:00 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:00 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:01 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:01 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:01 +0700] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:01 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:01 +0700] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:02 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:02 +0700] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:02 +0700] "GET /wp-includes/defaults.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:02 +0700] "GET /images/DJP9.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:02 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:03 +0700] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:30:03 +0700] "GET /natural.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:30:03 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:03 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:04 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:04 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:04 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:04 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:04 +0700] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:05 +0700] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:05 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:05 +0700] "GET /wp-content/languages/404.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:05 +0700] "GET /update/403.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:30:06 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:06 +0700] "GET /wp-includes/assets/info.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:06 +0700] "GET /wp-includes/class.api.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:06 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:06 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:07 +0700] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:07 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:07 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:07 +0700] "GET /db.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:08 +0700] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:08 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:08 +0700] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:08 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:09 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:09 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:09 +0700] "GET /templates/beez3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:09 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:09 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:10 +0700] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:10 +0700] "GET /images/class-config.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:10 +0700] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:10 +0700] "GET /templates/beez/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:11 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:11 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:11 +0700] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:11 +0700] "GET /wp-content/product.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:11 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:12 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:30:12 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:12 +0700] "GET /css/css.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:13 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:13 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:13 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:13 +0700] "GET /wp-includes/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:13 +0700] "GET /assets/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:14 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:14 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:14 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:14 +0700] "GET /adminfuns.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:15 +0700] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:15 +0700] "GET /wp_wlx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:15 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:15 +0700] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:15 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:16 +0700] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:16 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:16 +0700] "GET /wp-header.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:16 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:16 +0700] "GET /Marvins.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:17 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:17 +0700] "GET /wp-class.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:17 +0700] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:17 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:18 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:18 +0700] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:18 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:18 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:18 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:30:19 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:19 +0700] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:19 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:19 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:20 +0700] "GET /images/images/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:21 +0700] "GET /images/class.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:21 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:21 +0700] "GET /web.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:21 +0700] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:30:22 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:22 +0700] "GET /wp-content/bypass.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:22 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:22 +0700] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:22 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:23 +0700] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:23 +0700] "GET /radio.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:23 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:23 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:24 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:24 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:24 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:24 +0700] "GET /ms-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:24 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:25 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:25 +0700] "GET /wp-includes/infi.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:25 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:25 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /images/index22.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /wp-user.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:26 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:27 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:27 +0700] "GET /special.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:27 +0700] "GET /assets/script.js.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:28 +0700] "GET /cgi-bin/class.api.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:29 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:29 +0700] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:29 +0700] "GET /wp-includes/edit.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:29 +0700] "GET /webdb.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:30 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:30 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:30:30 +0700] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:30 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:30 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:31 +0700] "GET /wp-includes/click.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:31 +0700] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:31 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:31 +0700] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:31 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:32 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:32 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:32 +0700] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:30:32 +0700] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:33 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:33 +0700] "GET /wp-admin/user/network.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:33 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:33 +0700] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:33 +0700] "GET /wp-includes/xl2023.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:34 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:34 +0700] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:34 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:34 +0700] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:35 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:35 +0700] "GET /wp-links.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:35 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:35 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:35 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:36 +0700] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:36 +0700] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:30:36 +0700] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:36 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:37 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:37 +0700] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:30:37 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:37 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:37 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:38 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:38 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:38 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:38 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:30:39 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:39 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:39 +0700] "GET /wp-admin/xleet.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:39 +0700] "GET /templates/beez3/bypass.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:39 +0700] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:30:40 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:30:40 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:40 +0700] "GET /cgi-bin/index.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:40 +0700] "GET /wp-content/uploads/file.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:40 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:41 +0700] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:41 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:41 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:41 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:41 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:42 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:30:42 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:42 +0700] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:42 +0700] "GET /blog/wp-content/about.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:43 +0700] "GET /hehehehe.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:43 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:43 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:43 +0700] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:30:43 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:44 +0700] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:44 +0700] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:44 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:44 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:30:44 +0700] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:45 +0700] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:45 +0700] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:30:45 +0700] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:45 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:46 +0700] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:46 +0700] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:46 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:46 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:46 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:47 +0700] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:47 +0700] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:47 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:30:47 +0700] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:47 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:48 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:48 +0700] "GET /blog/wp-includes/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:48 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:48 +0700] "GET /blog/wp-admin/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:48 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:49 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:49 +0700] "GET /cgi-bin/install.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:49 +0700] "GET /wp-content/wso.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:49 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:50 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:50 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:50 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:30:50 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:50 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:51 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:30:51 +0700] "GET /flower.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:51 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:51 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /setup.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:52 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:53 +0700] "GET /wp-content/plugin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:53 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:30:53 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:30:53 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:30:54 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:54 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:54 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:54 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:54 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:55 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:55 +0700] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:55 +0700] "GET /wp-login.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:55 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:56 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:30:56 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:56 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:56 +0700] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:56 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:57 +0700] "GET /js/fm.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:57 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:30:57 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:30:57 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:58 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:58 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:30:58 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:58 +0700] "GET /adminfuns.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:58 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:30:59 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:30:59 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:59 +0700] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:30:59 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:30:59 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:00 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:00 +0700] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:31:00 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:00 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:00 +0700] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:01 +0700] "GET /wp-content.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:01 +0700] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:31:01 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:31:01 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:01 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:31:02 +0700] "GET /customize.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:02 +0700] "GET /license.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:02 +0700] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:03 +0700] "GET /lock.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:03 +0700] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:03 +0700] "GET /wp-includes/atomlib.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:03 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:03 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:04 +0700] "GET /.well-known/wincust.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:04 +0700] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:04 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:31:04 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:05 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:05 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:05 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:31:05 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:05 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:06 +0700] "GET /fonts/database.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:06 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:06 +0700] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:06 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:07 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:07 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:07 +0700] "GET /wp-atom.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:31:07 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:07 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:08 +0700] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:08 +0700] "GET /assets/images/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:08 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:08 +0700] "GET /js/wp-login.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:08 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:31:09 +0700] "GET /worm.PhP HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:09 +0700] "GET /ext.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:09 +0700] "GET /delpaths.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:09 +0700] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:31:09 +0700] "GET /wp-includes/bk/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:10 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:10 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:10 +0700] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:10 +0700] "GET /gifclass.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:11 +0700] "GET /plugin.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:11 +0700] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:11 +0700] "GET /update-core.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:11 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:11 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:31:12 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:12 +0700] "GET /wp-admin/defaults.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:12 +0700] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:12 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:12 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:13 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:13 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:13 +0700] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:13 +0700] "GET /assets/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:13 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:14 +0700] "GET /index2.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:14 +0700] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:14 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:14 +0700] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:14 +0700] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:15 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:15 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:15 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:15 +0700] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:16 +0700] "GET /.well-known/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:16 +0700] "GET /hehe.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:31:16 +0700] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:16 +0700] "GET /css/slider.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:16 +0700] "GET /dir.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:17 +0700] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:17 +0700] "GET /wp-content/style.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:17 +0700] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:31:17 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:18 +0700] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:18 +0700] "GET /filefuns.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:18 +0700] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:18 +0700] "GET /l.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:18 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:19 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:19 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:19 +0700] "GET /contacts.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:19 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:20 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:20 +0700] "GET /firewall.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:20 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:20 +0700] "GET /wp-content/uploads/content.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:20 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:21 +0700] "GET /images/js1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:31:21 +0700] "GET /wp-admin/maint/file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:31:21 +0700] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:21 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:22 +0700] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:23 +0700] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:23 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:23 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:24 +0700] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:24 +0700] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:24 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:24 +0700] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:24 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:31:25 +0700] "GET /wp-themes.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:25 +0700] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:25 +0700] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:25 +0700] "GET /mariju.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:25 +0700] "GET /waf_defender.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:26 +0700] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:26 +0700] "GET /av.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:26 +0700] "GET /wp-admin/css/glex.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:26 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:31:26 +0700] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:27 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:27 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:27 +0700] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:27 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:27 +0700] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:28 +0700] "GET /theme.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:28 +0700] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:28 +0700] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:28 +0700] "GET /Simple.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:29 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:29 +0700] "GET /wp-admin/1.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:29 +0700] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:29 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:29 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:30 +0700] "GET /css/av.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:30 +0700] "GET /images/waf_defender.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:30 +0700] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:30 +0700] "GET /small.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:31 +0700] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:32 +0700] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:32 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:32 +0700] "GET /functions.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:32 +0700] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:33 +0700] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:33 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:33 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:33 +0700] "GET /aks.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:33 +0700] "GET /litespeed.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:34 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:34 +0700] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:34 +0700] "GET /wpn.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:34 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:35 +0700] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:35 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 1116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:35 +0700] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:35 +0700] "GET /wp-includes/db.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:35 +0700] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:36 +0700] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:36 +0700] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:36 +0700] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:36 +0700] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:36 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:37 +0700] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:37 +0700] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:37 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:37 +0700] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:37 +0700] "GET /fog/management/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:38 +0700] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:38 +0700] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:31:38 +0700] "GET /images/wp-aespa.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:38 +0700] "GET /wp-includes/Text/options.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:39 +0700] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:39 +0700] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:39 +0700] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:39 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:39 +0700] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:40 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:40 +0700] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:40 +0700] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:40 +0700] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:41 +0700] "GET /.well-known/save.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:41 +0700] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:41 +0700] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:31:41 +0700] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:41 +0700] "GET /uploads/af32.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:31:42 +0700] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:42 +0700] "GET /Sanskrit.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:42 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:42 +0700] "GET /.trash7309/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:31:42 +0700] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:43 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:43 +0700] "GET /memberfuns.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:43 +0700] "GET /infos.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:31:43 +0700] "GET /modules/file.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /options-writing.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /options-reading.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /wsad.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:44 +0700] "GET /nation.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:45 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:45 +0700] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:45 +0700] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:45 +0700] "GET /autoload_classmap/wso.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:46 +0700] "GET /wp-atomx.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:46 +0700] "GET /admin-footer.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:31:46 +0700] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:46 +0700] "GET /XxX.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:46 +0700] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:47 +0700] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:47 +0700] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:47 +0700] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:47 +0700] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:48 +0700] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:48 +0700] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:48 +0700] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:48 +0700] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:48 +0700] "GET /css/media-widget-vide02.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:49 +0700] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:49 +0700] "GET /images/buy.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:31:49 +0700] "GET /templates/beez3/av.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:49 +0700] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:31:50 +0700] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:50 +0700] "GET /plugins/function.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:50 +0700] "GET /.well-known/header.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:50 +0700] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:50 +0700] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:51 +0700] "GET /autoload_classmap/install.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:51 +0700] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:51 +0700] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:31:51 +0700] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:51 +0700] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:52 +0700] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:52 +0700] "GET /wp-includes/Text/index.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:52 +0700] "GET /xex.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:52 +0700] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:52 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:31:53 +0700] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:31:53 +0700] "GET /upload/install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:31:53 +0700] "GET /wp-head.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:53 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:54 +0700] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:54 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:54 +0700] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:54 +0700] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:54 +0700] "GET /images/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:55 +0700] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:55 +0700] "GET /wp-content/edit.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:55 +0700] "GET /.well-known/info.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:55 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /xp.php%20 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /wp-content/bypass_1.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:56 +0700] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:57 +0700] "GET /admin/user_data.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:31:57 +0700] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:57 +0700] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:57 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:58 +0700] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:58 +0700] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:31:58 +0700] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:31:58 +0700] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:58 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:59 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:31:59 +0700] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:31:59 +0700] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:31:59 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:31:59 +0700] "GET /wp-header.php%20 HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:00 +0700] "GET /file.php%20 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:32:00 +0700] "GET /.tmb/doc.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:00 +0700] "GET /wp-editor.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:00 +0700] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:01 +0700] "GET /images/install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:01 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:01 +0700] "GET /adminfusm.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:01 +0700] "GET /js/js1.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:01 +0700] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:02 +0700] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:02 +0700] "GET /images/habhan.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:02 +0700] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:02 +0700] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:02 +0700] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:03 +0700] "GET /about/function.php%20 HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:03 +0700] "GET /routes/bypass.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:03 +0700] "GET /wp-includes/images/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:03 +0700] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:32:03 +0700] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:32:04 +0700] "GET /f35_SpaceTn.php HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:04 +0700] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:04 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:04 +0700] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:05 +0700] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:05 +0700] "GET /wp-includes/category-double.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:05 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:05 +0700] "GET /blog/signatur.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:05 +0700] "GET /wp-includes/assets/db.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:06 +0700] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:06 +0700] "GET /include/install.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:06 +0700] "GET /gm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:06 +0700] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /js/content-type.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /about/goods.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /function/goods.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:07 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:08 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:08 +0700] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:08 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:08 +0700] "GET /plugin-install.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:09 +0700] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:09 +0700] "GET /wp-admin/js/load.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:09 +0700] "GET /images/firewall.php7 HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:09 +0700] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:09 +0700] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:10 +0700] "GET /wp-includes/as.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:10 +0700] "GET /wp-content/item.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:10 +0700] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:10 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:11 +0700] "GET /wp-includes/customize/db.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:11 +0700] "GET /css/fan.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:11 +0700] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:11 +0700] "GET /images/mah.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:11 +0700] "GET /wp-content/waf_defender.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:12 +0700] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:12 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:12 +0700] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:32:12 +0700] "GET /wp-content/content.php HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:13 +0700] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:13 +0700] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:13 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:13 +0700] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:13 +0700] "GET /.well-known/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:14 +0700] "GET /b.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:32:14 +0700] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:14 +0700] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:32:14 +0700] "GET /css/as.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:32:14 +0700] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:15 +0700] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:15 +0700] "GET /wsax.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:15 +0700] "GET /bless.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:15 +0700] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:16 +0700] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:16 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:16 +0700] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:16 +0700] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:16 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:17 +0700] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:17 +0700] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:17 +0700] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:17 +0700] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:17 +0700] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:32:18 +0700] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:18 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:18 +0700] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:18 +0700] "GET /uploads/xsec.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:18 +0700] "GET /images/Marvins.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:32:19 +0700] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:19 +0700] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:19 +0700] "GET /wp-content/languages/radio.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:19 +0700] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:20 +0700] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:20 +0700] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:20 +0700] "GET /admin.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:20 +0700] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:20 +0700] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:21 +0700] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:21 +0700] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:21 +0700] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 1107 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:21 +0700] "GET /wp-admin/network/class.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:22 +0700] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:22 +0700] "GET /wp-includes/ms-file.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:22 +0700] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:22 +0700] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:22 +0700] "GET /images/news_event/1.php7 HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:23 +0700] "GET /chosen.php%20 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:23 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:32:23 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:23 +0700] "GET /wp-includes/network.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:23 +0700] "GET /page.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:24 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:32:24 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:24 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:24 +0700] "GET /wp-content/admin-footer.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:24 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:25 +0700] "GET /assets/info.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:25 +0700] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:25 +0700] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:25 +0700] "GET /wp-content/1.php%20 HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:26 +0700] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:26 +0700] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:26 +0700] "GET /wp-includes/assets/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:26 +0700] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:26 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:27 +0700] "GET /images/autoload_classmap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:27 +0700] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:27 +0700] "GET /x/test.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:27 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:28 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:32:28 +0700] "GET /wp-admin/css/install.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:28 +0700] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:28 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:28 +0700] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:29 +0700] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:29 +0700] "GET /shop.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:29 +0700] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:29 +0700] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:29 +0700] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:30 +0700] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:30 +0700] "GET /wp-admin/user/header.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:30 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:30 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:31 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:31 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:31 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:31 +0700] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 1101 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:31 +0700] "GET /wp-includes/bypass.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:32 +0700] "GET /images/fm.php7 HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:32 +0700] "GET /wp-includes/count.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:32 +0700] "GET /wp-error_log.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:32 +0700] "GET /assets/class_update_plugins.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:32 +0700] "GET /wp-admin/network/av.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:33 +0700] "GET /templates/beez5/error.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:33 +0700] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:33 +0700] "GET /js/firewall.php7 HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:33 +0700] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:33 +0700] "GET /assets/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:34 +0700] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:32:34 +0700] "GET /images/stories/themes.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:34 +0700] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:34 +0700] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:35 +0700] "GET /home/O-Simple.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:35 +0700] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:32:35 +0700] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:35 +0700] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:35 +0700] "GET /style.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:36 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:36 +0700] "GET /wp-content/themes/av.php HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:36 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:36 +0700] "GET /saka.phP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:37 +0700] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:37 +0700] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:37 +0700] "GET /baxa1.php7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:37 +0700] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:37 +0700] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:32:38 +0700] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:38 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:38 +0700] "GET /about/install.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:38 +0700] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:39 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:39 +0700] "GET /images/av.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:39 +0700] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:39 +0700] "GET /js/mrx.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:39 +0700] "GET /wp-includes/colour.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:40 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:40 +0700] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 1128 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:40 +0700] "GET /wp-includes/images/include.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:40 +0700] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /upload/bilder/cong.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /fonts/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:41 +0700] "GET /entrepreneuse.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:42 +0700] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:42 +0700] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:42 +0700] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:42 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:43 +0700] "GET /js/db.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:43 +0700] "GET /.well-known/buy.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:43 +0700] "GET /index/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:43 +0700] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:43 +0700] "GET /function/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:44 +0700] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:32:44 +0700] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:44 +0700] "GET /testt.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:44 +0700] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:44 +0700] "GET /wp-admin/js/sad.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:45 +0700] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:45 +0700] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 1111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:45 +0700] "GET /web/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:45 +0700] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:46 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:46 +0700] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:46 +0700] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:46 +0700] "GET /wikindex.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:46 +0700] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:47 +0700] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:47 +0700] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:47 +0700] "GET /wp-content/as.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:47 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:48 +0700] "GET /wp-includes/js/simi.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:48 +0700] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:48 +0700] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:48 +0700] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:32:48 +0700] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:49 +0700] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:49 +0700] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 1033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:49 +0700] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:49 +0700] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:49 +0700] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:50 +0700] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:32:50 +0700] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:50 +0700] "GET /wp-content/alam.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:32:50 +0700] "GET /css/adminfusm.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:50 +0700] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:32:51 +0700] "GET /wp-content/raw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:51 +0700] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:51 +0700] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:51 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:52 +0700] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:52 +0700] "GET /wp-admin/media-new.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:52 +0700] "GET /media-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:32:52 +0700] "GET /js/class_api.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:32:52 +0700] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:53 +0700] "GET /admin/install.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:53 +0700] "GET /wp-includes/plugin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:53 +0700] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 1048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:53 +0700] "GET /wp-admin/js/item.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:54 +0700] "GET /pages.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:32:54 +0700] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:54 +0700] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:54 +0700] "GET /uploads/function.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:55 +0700] "GET /assets/js/doc.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:55 +0700] "GET /assets/comfunctions.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:55 +0700] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:55 +0700] "GET /css/adminfus.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:55 +0700] "GET /adminfus.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:56 +0700] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:56 +0700] "GET /images/as.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:56 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:32:56 +0700] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:57 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:57 +0700] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:32:57 +0700] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:32:57 +0700] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:32:57 +0700] "GET /css/install.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:58 +0700] "GET /assets/av.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:58 +0700] "GET /autoload_classmap/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:58 +0700] "GET /wp-configs.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:32:58 +0700] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:59 +0700] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:32:59 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:32:59 +0700] "GET /wp-admin/item.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:32:59 +0700] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:32:59 +0700] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:00 +0700] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:00 +0700] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:00 +0700] "GET /ms-users.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:00 +0700] "GET /wp-admin/js/cc.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:33:01 +0700] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:01 +0700] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:01 +0700] "GET /css/file.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:01 +0700] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:01 +0700] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 1120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:02 +0700] "GET /assets/content.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:02 +0700] "GET /fm.php%20 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:02 +0700] "GET /wp-content/goods.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:02 +0700] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:02 +0700] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:03 +0700] "GET /assets/images/cloud.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:03 +0700] "GET /wp-includes/log.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:03 +0700] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 1109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:03 +0700] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 1114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:04 +0700] "GET /wp-includes/aw.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:04 +0700] "GET /update/gely.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:04 +0700] "GET /uploads/c99shell.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:04 +0700] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:33:05 +0700] "GET /uploads/lala.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:05 +0700] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:05 +0700] "GET /wp-includes/css/install.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:05 +0700] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:05 +0700] "GET /top.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:06 +0700] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:06 +0700] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:06 +0700] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:06 +0700] "GET /wp-content/click.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:06 +0700] "GET /wp-includes/template-less.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:07 +0700] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:07 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:07 +0700] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:07 +0700] "GET /retu11.PhP7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:08 +0700] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:08 +0700] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:08 +0700] "GET /js/1.php7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:08 +0700] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:08 +0700] "GET /wp-includes/assets/min.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:09 +0700] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:09 +0700] "GET /backup/autoload_classmap.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:09 +0700] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:09 +0700] "GET /wp-includes/file.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:33:10 +0700] "GET /wp-content/themes.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:10 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:10 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:10 +0700] "GET /wp-includes/load.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:10 +0700] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:11 +0700] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:11 +0700] "GET /images/c99.php HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:11 +0700] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:11 +0700] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:12 +0700] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:12 +0700] "GET /setup-config.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:12 +0700] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:12 +0700] "GET /wp-content/uploads/install.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:12 +0700] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:13 +0700] "GET /type.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:13 +0700] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:13 +0700] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:13 +0700] "GET /as/function.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:13 +0700] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:14 +0700] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:14 +0700] "GET /css/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:14 +0700] "GET /css/hekokstyle.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:33:14 +0700] "GET /wp-admin/user/file.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:14 +0700] "GET /files/shares/403ws.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:15 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:15 +0700] "GET /images/fix.php7 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:15 +0700] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:15 +0700] "GET /files.php%20 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:16 +0700] "GET /wp-includes/assets/system.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:16 +0700] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:33:16 +0700] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:16 +0700] "GET /images/file.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:16 +0700] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:17 +0700] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 1113 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:17 +0700] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:17 +0700] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:17 +0700] "GET /img/chat-search.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:18 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:18 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:18 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:18 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:18 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:19 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:19 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:19 +0700] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:19 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:19 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:20 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:20 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
185.206.227.243 - - [07/Oct/2025:16:33:20 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:20 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:20 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:21 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:21 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:21 +0700] "GET /wp-includes/id3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:21 +0700] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:21 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:22 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:22 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:22 +0700] "GET /blog/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:22 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:23 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:23 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:23 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:23 +0700] "GET /wp-admin/js/dist/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:23 +0700] "GET /assets/css/dist/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:24 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:24 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:24 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:33:24 +0700] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /wp-admin/js/widget/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:25 +0700] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:26 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:26 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:26 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:26 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:27 +0700] "GET /wp-includes/ID3 HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:27 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:27 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:27 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:27 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:28 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:28 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:28 +0700] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:28 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:29 +0700] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:29 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:29 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:29 +0700] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:29 +0700] "GET /wordpress/wp-includes/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:30 +0700] "GET /blog/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:30 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:30 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:30 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /admin/tmp/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:31 +0700] "GET /administrator/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:32 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:32 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:32 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:32 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:33 +0700] "GET /home/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:33 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:33 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:33 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:34 +0700] "GET /mt/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:34 +0700] "GET /site/wp-includes/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:34 +0700] "GET /tmps/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:33:34 +0700] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:34 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:35 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:35 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:35 +0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:35 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:36 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:36 +0700] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:36 +0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:33:36 +0700] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:36 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:37 +0700] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:37 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:37 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:33:37 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:38 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:38 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:38 +0700] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:38 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:38 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:39 +0700] "GET /cache-wordpress/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:39 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:39 +0700] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:39 +0700] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:39 +0700] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.206.227.243 - - [07/Oct/2025:16:33:40 +0700] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:40 +0700] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:33:40 +0700] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:40 +0700] "GET /wp-content/plugins/db/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:40 +0700] "GET /wp-content/plugins/home/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:41 +0700] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:41 +0700] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:41 +0700] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:41 +0700] "GET /wp-content/plugins/random/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:42 +0700] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:42 +0700] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:42 +0700] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:42 +0700] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:42 +0700] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:43 +0700] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:43 +0700] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:43 +0700] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:43 +0700] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:33:44 +0700] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:44 +0700] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:44 +0700] "GET /wp-content/themes/alera/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:44 +0700] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:44 +0700] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:45 +0700] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:45 +0700] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:45 +0700] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.206.227.243 - - [07/Oct/2025:16:33:45 +0700] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:46 +0700] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:46 +0700] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:46 +0700] "GET /admin/upload/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.206.227.243 - - [07/Oct/2025:16:33:46 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:46 +0700] "GET /up/.well-known/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:47 +0700] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:47 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:47 +0700] "GET /css/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:47 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:47 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:48 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:48 +0700] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:48 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:48 +0700] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:49 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:49 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:49 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:49 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:49 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:50 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:50 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:50 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:50 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:50 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:51 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:51 +0700] "GET /about/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:51 +0700] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:51 +0700] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
185.206.227.243 - - [07/Oct/2025:16:33:51 +0700] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.206.227.243 - - [07/Oct/2025:16:33:52 +0700] "GET /wp-content/plugins/core/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:52 +0700] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
185.206.227.243 - - [07/Oct/2025:16:33:52 +0700] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.206.227.243 - - [07/Oct/2025:16:33:52 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:53 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:53 +0700] "GET /fonts/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:53 +0700] "GET /js/ HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:53 +0700] "GET /routes/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:53 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
185.206.227.243 - - [07/Oct/2025:16:33:54 +0700] "GET /templates/beez3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:54 +0700] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.206.227.243 - - [07/Oct/2025:16:33:54 +0700] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:54 +0700] "GET /templates/atomic/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-content/maintenance/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:55 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:56 +0700] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:56 +0700] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:56 +0700] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.206.227.243 - - [07/Oct/2025:16:33:56 +0700] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:57 +0700] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.206.227.243 - - [07/Oct/2025:16:33:57 +0700] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:57 +0700] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:57 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:57 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
185.206.227.243 - - [07/Oct/2025:16:33:58 +0700] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:58 +0700] "GET /includes/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.206.227.243 - - [07/Oct/2025:16:33:58 +0700] "GET /themes/pridmag/ HTTP/1.1" 301 1025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
136.144.33.55 - - [07/Oct/2025:17:04:18 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
172.245.102.93 - - [07/Oct/2025:17:04:20 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
58.49.233.126 - - [07/Oct/2025:18:53:01 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
130.89.144.164 - - [07/Oct/2025:19:24:21 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)"
130.89.144.164 - - [07/Oct/2025:19:24:22 +0700] "GET / HTTP/1.1" 301 1010 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)"
162.142.125.210 - - [07/Oct/2025:20:09:43 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
101.91.148.219 - - [07/Oct/2025:22:58:03 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.57.63.112 - - [07/Oct/2025:23:45:03 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:04 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:04 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:05 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:05 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:05 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:06 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:06 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:07 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:07 +0700] "GET /info.php HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:08 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:08 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:09 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:09 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:10 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:10 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:10 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:11 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:11 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:12 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:12 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:13 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:13 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:14 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:14 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:15 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:15 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:15 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:16 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:16 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1030 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:17 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:18 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:18 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:18 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:19 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:19 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:19 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:20 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:20 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:21 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1031 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:21 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:22 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:22 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:23 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:23 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:24 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:24 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:24 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:25 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1083 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:25 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1042 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:26 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:27 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:27 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:27 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:28 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:28 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:29 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:29 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:29 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:30 +0700] "GET /gecko.php HTTP/1.1" 301 1019 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:30 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:31 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:31 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:32 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:32 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:33 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:33 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:33 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:34 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:34 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1049 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:35 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:36 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:36 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:36 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:37 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:37 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:38 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:38 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:38 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:39 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1064 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:39 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:40 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:41 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:41 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:41 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:42 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:42 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:42 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:43 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:43 +0700] "GET /admin/index.php HTTP/1.1" 301 1025 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:44 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:45 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:45 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:45 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:46 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:46 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:47 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:47 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:47 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:48 +0700] "GET /install.php HTTP/1.1" 301 1021 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:48 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:49 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:49 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:50 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:50 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:51 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:51 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:51 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1067 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:52 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:52 +0700] "GET /wp-mail.php HTTP/1.1" 301 1021 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:53 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:54 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:54 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:54 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:55 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:55 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:56 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:56 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:56 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:57 +0700] "GET /mail.php HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:57 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:58 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:59 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:59 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:45:59 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:00 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:00 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:00 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:01 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:01 +0700] "GET /blog.php HTTP/1.1" 301 1018 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:02 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:03 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:03 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:03 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:04 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:04 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:05 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:05 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:05 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:06 +0700] "GET /wp-admin/ HTTP/1.1" 301 1019 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:06 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:07 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:08 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:08 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:08 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:09 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
51.57.63.112 - - [07/Oct/2025:23:46:09 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
110.40.186.63 - - [08/Oct/2025:02:51:53 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
101.91.148.219 - - [08/Oct/2025:06:36:46 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.18.64.10 - - [08/Oct/2025:07:41:05 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:06 +0700] "GET /zxl.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:06 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:06 +0700] "GET /gdn.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:06 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:07 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:07 +0700] "GET /jga.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:07 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:07 +0700] "GET /wp-domain.php HTTP/1.1" 301 1060 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:07 +0700] "GET /abcd.php HTTP/1.1" 301 1018 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:08 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:08 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:08 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:08 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:08 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:09 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:09 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:09 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:09 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:09 +0700] "GET /cong.php HTTP/1.1" 301 1018 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:10 +0700] "GET /mpvloi.php HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:10 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:10 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:10 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:10 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:11 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:11 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:11 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:11 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:11 +0700] "GET /moon.php?p= HTTP/1.1" 301 1021 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:12 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:12 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:12 +0700] "GET /karak.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:12 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:13 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:14 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:14 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:14 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:14 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /tinny.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:15 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1023 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:16 +0700] "GET /jlex.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:16 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:16 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:16 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:17 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:18 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:18 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:18 +0700] "GET /sxo.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:18 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:19 +0700] "GET /css.php HTTP/1.1" 301 1017 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:20 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:20 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:20 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:20 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:21 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:21 +0700] "GET /v1.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:21 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:21 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:21 +0700] "GET /akcc.php?p= HTTP/1.1" 301 1058 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:22 +0700] "GET /406.php HTTP/1.1" 301 1017 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:22 +0700] "GET /222.php?p= HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:22 +0700] "GET /xo.php HTTP/1.1" 301 1053 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:22 +0700] "GET /akk.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:22 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:23 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:23 +0700] "GET /asdf.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:23 +0700] "GET /prod/infos.php HTTP/1.1" 301 1061 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:23 +0700] "GET /card.php HTTP/1.1" 301 1055 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:23 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:24 +0700] "GET /ant.php HTTP/1.1" 301 1017 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:24 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
20.18.64.10 - - [08/Oct/2025:07:41:24 +0700] "GET /wpc.php?p= HTTP/1.1" 301 1057 "-" "-"
182.43.70.143 - - [08/Oct/2025:10:25:23 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.143.248.236 - - [08/Oct/2025:14:26:44 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
167.94.146.58 - - [08/Oct/2025:20:55:15 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
114.117.233.112 - - [08/Oct/2025:22:27:47 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.169.12.161 - - [08/Oct/2025:23:48:59 +0700] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 1089 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:00 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:00 +0700] "GET /wp-content/cache/index.php HTTP/1.1" 301 1073 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:01 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:01 +0700] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 1087 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:01 +0700] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 1091 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:02 +0700] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 1101 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:02 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 1082 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:03 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:03 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1038 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:04 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:04 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:05 +0700] "GET /.alf.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:05 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:06 +0700] "GET /ez.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:06 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 1062 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:06 +0700] "GET /admin/index.php HTTP/1.1" 301 1062 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:07 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:07 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:08 +0700] "GET /gelay.php HTTP/1.1" 301 1019 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:08 +0700] "GET /installer.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:09 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:09 +0700] "GET /wp-sigunq.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:10 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:10 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:10 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:11 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:11 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:12 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:12 +0700] "GET /inputs.php HTTP/1.1" 301 1020 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:13 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:13 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:14 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:14 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:15 +0700] "GET /wp-comments-post.php HTTP/1.1" 301 1067 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:15 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:15 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:16 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:16 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:17 +0700] "GET /post.php HTTP/1.1" 301 1018 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:17 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:18 +0700] "GET /geju.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:18 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:19 +0700] "GET /hoot.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:19 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:19 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:20 +0700] "GET /mail.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:20 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:21 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:21 +0700] "GET /upfile.php HTTP/1.1" 301 1020 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:22 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:22 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:23 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:23 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:24 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:24 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:24 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:25 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:25 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:26 +0700] "GET /as.php HTTP/1.1" 301 1016 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:26 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:27 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:27 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:28 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:28 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:28 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:29 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:29 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:30 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:30 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1035 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:31 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:31 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:32 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.169.12.161 - - [08/Oct/2025:23:49:32 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
176.126.103.148 - - [09/Oct/2025:00:49:53 +0700] "GET /test/phpinfo HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:49:56 +0700] "GET /test/_profiler/phpinfo HTTP/1.1" 301 1032 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
176.126.103.148 - - [09/Oct/2025:00:49:58 +0700] "GET /_phpinfo.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
176.126.103.148 - - [09/Oct/2025:00:50:01 +0700] "GET /pi.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:02 +0700] "GET /i.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:04 +0700] "GET /phpinfo.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:08 +0700] "GET /php_info.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
176.126.103.148 - - [09/Oct/2025:00:50:09 +0700] "GET /test.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:11 +0700] "GET /phpinfo HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:13 +0700] "GET /_profiler/phpinfo.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:14 +0700] "GET /profiler/info.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:16 +0700] "GET /phpinfo/test.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
176.126.103.148 - - [09/Oct/2025:00:50:18 +0700] "GET /php.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
176.126.103.148 - - [09/Oct/2025:00:50:21 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
176.126.103.148 - - [09/Oct/2025:00:50:25 +0700] "GET /.aws/credentials HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
20.168.82.108 - - [09/Oct/2025:02:29:10 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:11 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:11 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:11 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:12 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:12 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:13 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:13 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:13 +0700] "GET /images/index.php HTTP/1.1" 301 1063 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:14 +0700] "GET /info.php HTTP/1.1" 301 1018 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:14 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:15 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:15 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:16 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:16 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:17 +0700] "GET /wp-good.php HTTP/1.1" 301 1058 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:17 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:17 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1072 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:18 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:18 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:19 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:20 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:20 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:20 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:21 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:21 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:22 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:22 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:22 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:23 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1030 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:23 +0700] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 1083 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:24 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:25 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1071 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:25 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:25 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:26 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:26 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:26 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:27 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:27 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1031 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:28 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:29 +0700] "GET /file17.php HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:29 +0700] "GET /wp-content/akp.php HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:30 +0700] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 1079 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:30 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:30 +0700] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:31 +0700] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 1076 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:31 +0700] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 1080 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:31 +0700] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 1083 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:32 +0700] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 1042 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:32 +0700] "GET /mass.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:33 +0700] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 1073 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:34 +0700] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 1089 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:34 +0700] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 1080 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:34 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1079 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:35 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:35 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:36 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:36 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:36 +0700] "GET /gecko.php HTTP/1.1" 301 1019 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:37 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:38 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:38 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:39 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:39 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:39 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:40 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:40 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:41 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:41 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1049 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:42 +0700] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 1088 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:42 +0700] "GET /wp-admin/index.php HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:02:29:43 +0700] "GET /wp-content/1.php HTTP/1.1" 301 1063 "-" "-"
191.101.61.195 - - [09/Oct/2025:03:03:28 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
104.41.205.21 - - [09/Oct/2025:03:19:57 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:58 +0700] "GET /t3x.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:58 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:58 +0700] "GET /bb5.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:59 +0700] "GET /Okxob.php HTTP/1.1" 301 1056 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:59 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:19:59 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:00 +0700] "GET /naxc.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:00 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:01 +0700] "GET /a.php HTTP/1.1" 301 1015 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:01 +0700] "GET /lhh2.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:02 +0700] "GET /thh.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:02 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:03 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:03 +0700] "GET /alam.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:03 +0700] "GET /witm.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:04 +0700] "GET /asserter.php HTTP/1.1" 301 1059 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:04 +0700] "GET /ntgn.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:04 +0700] "GET /xo.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:05 +0700] "GET /pass.php HTTP/1.1" 301 1018 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:05 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:06 +0700] "GET /35.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:06 +0700] "GET /past1.php HTTP/1.1" 301 1056 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:07 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:07 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:07 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:08 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:08 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:08 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:09 +0700] "GET /r.php HTTP/1.1" 301 1015 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:09 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:10 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:10 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:11 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:11 +0700] "GET /i1.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:11 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:12 +0700] "GET /002.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:12 +0700] "GET /1100.php HTTP/1.1" 301 1055 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:13 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:13 +0700] "GET /v4.php HTTP/1.1" 301 1016 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:13 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:14 +0700] "GET /0x1949.php HTTP/1.1" 301 1057 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:14 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:15 +0700] "GET /build.php HTTP/1.1" 301 1056 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:15 +0700] "GET /x4.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:16 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:16 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:16 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:17 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:17 +0700] "GET /g.php HTTP/1.1" 301 1015 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:18 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:18 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:19 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:19 +0700] "GET /20.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:19 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:20 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:20 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:20 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:21 +0700] "GET /17.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:21 +0700] "GET /yu.php HTTP/1.1" 301 1016 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:22 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:22 +0700] "GET /ge.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:23 +0700] "GET /25.php HTTP/1.1" 301 1053 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:23 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:23 +0700] "GET /upload/wp-info.php HTTP/1.1" 301 1065 "-" "-"
104.41.205.21 - - [09/Oct/2025:03:20:24 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "-"
87.251.78.46 - - [09/Oct/2025:05:05:23 +0700] "GET /phpinfo HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:24 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:24 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:25 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:25 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:26 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:26 +0700] "GET /php_info.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:27 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:27 +0700] "GET /pi.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:28 +0700] "GET /config.phpinfo HTTP/1.1" 301 1024 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:28 +0700] "GET /admin/phpinfo.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:29 +0700] "GET /.aws/credentials HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:29 +0700] "GET /pinfo.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:29 +0700] "GET /phpinfo2.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:30 +0700] "GET /php_version.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:30 +0700] "GET /version.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:31 +0700] "GET /server-info.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:31 +0700] "GET /env.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
87.251.78.46 - - [09/Oct/2025:05:05:32 +0700] "GET /init.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
175.6.217.4 - - [09/Oct/2025:06:03:24 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
93.158.91.237 - - [09/Oct/2025:09:05:21 +0700] "GET /robots.txt HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
93.158.71.185 - - [09/Oct/2025:09:05:23 +0700] "GET / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123"
118.89.233.234 - - [09/Oct/2025:09:55:11 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
149.40.53.3 - - [09/Oct/2025:10:44:54 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.224.92.127 - - [09/Oct/2025:12:11:14 +0700] "GET /about.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
91.224.92.127 - - [09/Oct/2025:12:11:18 +0700] "GET /admin.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
193.143.1.119 - - [09/Oct/2025:13:02:23 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "-"
193.143.1.119 - - [09/Oct/2025:13:02:24 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1064 "-" "-"
193.143.1.119 - - [09/Oct/2025:13:02:25 +0700] "GET /info HTTP/1.1" 301 1051 "-" "-"
193.143.1.119 - - [09/Oct/2025:13:02:26 +0700] "GET /phpinfo HTTP/1.1" 301 1054 "-" "-"
193.143.1.119 - - [09/Oct/2025:13:02:27 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
193.143.1.119 - - [09/Oct/2025:13:02:28 +0700] "GET /phpmyinfo HTTP/1.1" 301 1056 "-" "-"
43.143.248.236 - - [09/Oct/2025:13:53:41 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
77.237.247.195 - - [09/Oct/2025:14:17:16 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0"
20.171.98.147 - - [09/Oct/2025:15:34:09 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:10 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:11 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:11 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:11 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:12 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:12 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:13 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:13 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:13 +0700] "GET /abcd.php HTTP/1.1" 301 1018 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:14 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:15 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:15 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:16 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1083 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:16 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 1076 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:16 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:17 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:17 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:17 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:18 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 1039 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:18 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:19 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:20 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1067 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:20 +0700] "GET /wp-content/alfa.php HTTP/1.1" 301 1066 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:20 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1066 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:21 +0700] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 1073 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:21 +0700] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 1071 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:22 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:22 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:22 +0700] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 1049 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:23 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:24 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:24 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:25 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:25 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:25 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:26 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:26 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:26 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:27 +0700] "GET /wp-admin/ HTTP/1.1" 301 1019 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:27 +0700] "GET /info.php/aa.php HTTP/1.1" 301 1062 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:28 +0700] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 1086 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:29 +0700] "GET /about/function.php/aa.php HTTP/1.1" 301 1072 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:29 +0700] "GET /wp-includes/PHPMailer/Ab0ut.php/aa.php HTTP/1.1" 301 1085 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:29 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/file.php/aa.php HTTP/1.1" 301 1104 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:30 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:30 +0700] "GET /test1.php/aa.php HTTP/1.1" 301 1063 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:31 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:31 +0700] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 1081 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:31 +0700] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 301 1046 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:32 +0700] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 1081 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:33 +0700] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 1078 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:33 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 1075 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:34 +0700] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 1080 "-" "-"
20.171.98.147 - - [09/Oct/2025:15:34:34 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "-"
159.203.124.229 - - [09/Oct/2025:16:52:22 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:52:26 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:52:33 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:52:41 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:52:55 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:53:07 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
159.203.124.229 - - [09/Oct/2025:16:53:13 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
20.169.12.161 - - [09/Oct/2025:17:09:12 +0700] "GET /assets/ HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:13 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:13 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:14 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:14 +0700] "GET /Public/ HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:14 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:15 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:15 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:16 +0700] "GET /Site/ HTTP/1.1" 301 1052 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:16 +0700] "GET /system/ HTTP/1.1" 301 1017 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:17 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:18 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:18 +0700] "GET /files/ HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:18 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:19 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:19 +0700] "GET /Assets/ HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:20 +0700] "GET /images/stories/ HTTP/1.1" 301 1062 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:20 +0700] "GET /plugins/ HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:20 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:21 +0700] "GET /admin/images/slider/ HTTP/1.1" 301 1030 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:21 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1082 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:22 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:22 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:23 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 1089 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:23 +0700] "GET /components/ HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:24 +0700] "GET /admin/uploads/images/ HTTP/1.1" 301 1068 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:24 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:24 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:25 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:25 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1023 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:26 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:27 +0700] "GET /fix.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:27 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:27 +0700] "GET /adminfuns.php HTTP/1.1" 301 1060 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:28 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:28 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:29 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:29 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:29 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:30 +0700] "GET /class.php HTTP/1.1" 301 1019 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:30 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:31 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:32 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:32 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:32 +0700] "GET /bak.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:33 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:33 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:34 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:34 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:34 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1035 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:35 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:36 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:36 +0700] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 1074 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:37 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:37 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:37 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:38 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:38 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:39 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:39 +0700] "GET /atomlib.php HTTP/1.1" 301 1021 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:40 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:40 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:41 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:41 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:42 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:42 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:42 +0700] "GET /goat.php HTTP/1.1" 301 1055 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:43 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:43 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:44 +0700] "GET /lock360.php HTTP/1.1" 301 1021 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:44 +0700] "GET /mm.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:45 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 1066 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:45 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:46 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:46 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:46 +0700] "GET /wp-admin/images/moon.php HTTP/1.1" 301 1071 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:47 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 301 1068 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:47 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:48 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:48 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 1034 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:49 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 1084 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:49 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1074 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:50 +0700] "GET /wp-setup.php HTTP/1.1" 301 1059 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:50 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.169.12.161 - - [09/Oct/2025:17:09:51 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "-"
60.188.57.0 - - [09/Oct/2025:17:49:57 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.168.82.108 - - [09/Oct/2025:17:57:15 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 1062 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:16 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:16 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:17 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1067 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:17 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:17 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:18 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:18 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 1061 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:19 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:19 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 1024 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:20 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:20 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:21 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:21 +0700] "GET /wp-admin/includes/ HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:21 +0700] "GET /wp-admin/ HTTP/1.1" 301 1056 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:22 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:22 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:23 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:23 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:23 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1026 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:24 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:25 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:25 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 1069 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:26 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:26 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:26 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:27 +0700] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:27 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:28 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:28 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 1029 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:29 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:29 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:30 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:30 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:31 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:31 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:31 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:32 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:32 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:33 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1037 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:33 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:34 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:34 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:35 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:35 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:35 +0700] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:36 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:36 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:37 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:37 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 1039 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:38 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:38 +0700] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 1083 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:39 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:39 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:40 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:40 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:40 +0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 1070 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:41 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:41 +0700] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:42 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 1036 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:42 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:43 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:43 +0700] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 1083 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:44 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:44 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:45 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 1069 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:45 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 1073 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:45 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:46 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1073 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:46 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1035 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:47 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 1072 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:48 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:48 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:48 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:49 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:49 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 1074 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:50 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:50 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:50 +0700] "GET /upload/ HTTP/1.1" 301 1054 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:51 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1024 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:52 +0700] "GET /Admin/uploads/ HTTP/1.1" 301 1061 "-" "-"
20.168.82.108 - - [09/Oct/2025:17:57:52 +0700] "GET /admin/ HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:24 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:25 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:25 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:25 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:25 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:25 +0700] "GET /gm.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:26 +0700] "GET /hk.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:26 +0700] "GET /akcc.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:26 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:26 +0700] "GET /class20.php HTTP/1.1" 301 1021 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:26 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:27 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:27 +0700] "GET /file21.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:27 +0700] "GET /opop.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:27 +0700] "GET /gelay.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:28 +0700] "GET /011i.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:28 +0700] "GET /snus.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:28 +0700] "GET /pn.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:28 +0700] "GET /f6.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:28 +0700] "GET /nfmr.php HTTP/1.1" 301 1018 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:29 +0700] "GET /wfile.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:29 +0700] "GET /gof.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:29 +0700] "GET /jsp.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:29 +0700] "GET /alam.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:29 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:30 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:30 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:30 +0700] "GET /about3.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:30 +0700] "GET /file18.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:30 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:31 +0700] "GET /ut.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:31 +0700] "GET /031.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:31 +0700] "GET /520.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:31 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /an.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:32 +0700] "GET /system_log.php HTTP/1.1" 301 1024 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:33 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:33 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:33 +0700] "GET /v4.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:33 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:34 +0700] "GET /build.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:34 +0700] "GET /inde.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:34 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:34 +0700] "GET /ffile.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:34 +0700] "GET /0x0x.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:35 +0700] "GET /sec.php HTTP/1.1" 301 1017 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:35 +0700] "GET /ssss.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:35 +0700] "GET /anskrit.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:35 +0700] "GET /thh.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:36 +0700] "GET /he.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:36 +0700] "GET /ddgg.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:36 +0700] "GET /aves.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:36 +0700] "GET /pp.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:36 +0700] "GET /geck.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:37 +0700] "GET /plss3.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:37 +0700] "GET /ton.php HTTP/1.1" 301 1017 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:37 +0700] "GET /ahax.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /wp-gr.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /yellow.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /a1.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:38 +0700] "GET /zwso.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:39 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:39 +0700] "GET /epinyins.php HTTP/1.1" 301 1059 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:39 +0700] "GET /x.php HTTP/1.1" 301 1015 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:39 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:40 +0700] "GET /fffff.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:40 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:40 +0700] "GET /keu.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:40 +0700] "GET /file88.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:40 +0700] "GET /cccc.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:41 +0700] "GET /hexx.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:41 +0700] "GET /a2.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:41 +0700] "GET /cfile.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:41 +0700] "GET /jmfi2.php HTTP/1.1" 301 1019 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:41 +0700] "GET /file7.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:42 +0700] "GET /file4.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:42 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:42 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:42 +0700] "GET /efile.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:43 +0700] "GET /file18.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:43 +0700] "GET /filesss.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:43 +0700] "GET /tox.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:43 +0700] "GET /2clas.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:43 +0700] "GET /vee.php HTTP/1.1" 301 1017 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:44 +0700] "GET /ff2.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:44 +0700] "GET /rrr.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:44 +0700] "GET /alpa.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:44 +0700] "GET /aa21.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:44 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:45 +0700] "GET /fileas.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:45 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:45 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:45 +0700] "GET /wpc.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:45 +0700] "GET /aa.php HTTP/1.1" 301 1016 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:46 +0700] "GET /usep.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:46 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:46 +0700] "GET /lol.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:46 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /ilex.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /klex.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /blex.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /mlex.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /nfile.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:47 +0700] "GET /class19.php HTTP/1.1" 301 1021 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:48 +0700] "GET /resp.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:48 +0700] "GET /vanta.php HTTP/1.1" 301 1056 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:48 +0700] "GET /fass.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:48 +0700] "GET /huangs.php HTTP/1.1" 301 1057 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:49 +0700] "GET /anan.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:49 +0700] "GET /classgoto24.php HTTP/1.1" 301 1062 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:49 +0700] "GET /hook.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:49 +0700] "GET /simp.php HTTP/1.1" 301 1055 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:49 +0700] "GET /ckk.php HTTP/1.1" 301 1054 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:50 +0700] "GET /tiny.php HTTP/1.1" 301 1018 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:50 +0700] "GET /wa.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:50 +0700] "GET /wb.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:50 +0700] "GET /wc.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:51 +0700] "GET /wd.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:51 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:51 +0700] "GET /wf.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:51 +0700] "GET /wg.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:51 +0700] "GET /wh.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:52 +0700] "GET /wi.php HTTP/1.1" 301 1053 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:52 +0700] "GET /wj.php HTTP/1.1" 301 1016 "-" "-"
20.27.26.223 - - [09/Oct/2025:21:26:52 +0700] "GET /wk.php HTTP/1.1" 301 1053 "-" "-"
182.42.105.85 - - [09/Oct/2025:21:56:25 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
48.210.209.53 - - [09/Oct/2025:22:11:41 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:41 +0700] "GET /shoha.php HTTP/1.1" 301 1056 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:41 +0700] "GET /ftp.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:41 +0700] "GET /tgrs.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /wek.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /php.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /C1.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /auth.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /ht.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:42 +0700] "GET /st.php HTTP/1.1" 301 1016 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:43 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:43 +0700] "GET /444.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:43 +0700] "GET /gi.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:43 +0700] "GET /mds.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:44 +0700] "GET /zt2.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:44 +0700] "GET /zzz.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:44 +0700] "GET /nij.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:44 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:44 +0700] "GET /sts.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:45 +0700] "GET /uploxe.php HTTP/1.1" 301 1020 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:45 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:45 +0700] "GET /ropyx.php HTTP/1.1" 301 1056 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:45 +0700] "GET /class-config.php HTTP/1.1" 301 1063 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /403.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /cs.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:46 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:47 +0700] "GET /wo.php HTTP/1.1" 301 1016 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:47 +0700] "GET /v4.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:47 +0700] "GET /test2.php HTTP/1.1" 301 1056 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:47 +0700] "GET /jf1d22.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:48 +0700] "GET /v3.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:48 +0700] "GET /hn.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:48 +0700] "GET /nl.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:48 +0700] "GET /er8.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:48 +0700] "GET /zc-903.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:49 +0700] "GET /bb2.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:49 +0700] "GET /new.php HTTP/1.1" 301 1017 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:49 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:49 +0700] "GET /aipoyp.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /naxc.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /555.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:50 +0700] "GET /CLA.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:51 +0700] "GET /fmk.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:51 +0700] "GET /bless2.php HTTP/1.1" 301 1020 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:51 +0700] "GET /zc-749.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:51 +0700] "GET /we2.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /filesss.php HTTP/1.1" 301 1058 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /asd67.php HTTP/1.1" 301 1056 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /zhidagen.php HTTP/1.1" 301 1059 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /000.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:52 +0700] "GET /okxoby.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:53 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:53 +0700] "GET /wp.php HTTP/1.1" 301 1016 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:53 +0700] "GET /class17.php HTTP/1.1" 301 1058 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:53 +0700] "GET /dfre.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:54 +0700] "GET /nc.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:54 +0700] "GET /file21.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:54 +0700] "GET /AxAo.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:54 +0700] "GET /wo.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:54 +0700] "GET /Okxob.php HTTP/1.1" 301 1056 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:55 +0700] "GET /himu.php HTTP/1.1" 301 1055 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:55 +0700] "GET /sto.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:55 +0700] "GET /gdn.php HTTP/1.1" 301 1017 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:55 +0700] "GET /men.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:56 +0700] "GET /wo.php HTTP/1.1" 301 1053 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:56 +0700] "GET /sk25_1.php HTTP/1.1" 301 1057 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:56 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:56 +0700] "GET /af4.php HTTP/1.1" 301 1054 "-" "-"
48.210.209.53 - - [09/Oct/2025:22:11:56 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "-"
199.244.88.224 - - [09/Oct/2025:23:20:14 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
182.42.111.213 - - [10/Oct/2025:01:54:32 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
45.133.176.9 - - [10/Oct/2025:03:24:49 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
48.218.182.166 - - [10/Oct/2025:04:34:48 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:48 +0700] "GET /t3x.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:48 +0700] "GET /mds.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:48 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:49 +0700] "GET /bb5.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:49 +0700] "GET /cabs.php HTTP/1.1" 301 1055 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:49 +0700] "GET /Okxob.php HTTP/1.1" 301 1056 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:49 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:49 +0700] "GET /asasx.php HTTP/1.1" 301 1056 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:50 +0700] "GET /naxc.php HTTP/1.1" 301 1018 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:50 +0700] "GET /222.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:50 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:50 +0700] "GET /lhh2.php HTTP/1.1" 301 1055 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:51 +0700] "GET /thh.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:51 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:51 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:51 +0700] "GET /alam.php HTTP/1.1" 301 1055 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:51 +0700] "GET /witm.php HTTP/1.1" 301 1055 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:52 +0700] "GET /asserter.php HTTP/1.1" 301 1059 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:52 +0700] "GET /ntgn.php HTTP/1.1" 301 1018 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:52 +0700] "GET /xo.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:52 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:53 +0700] "GET /aw.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:53 +0700] "GET /35.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:53 +0700] "GET /past1.php HTTP/1.1" 301 1056 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:53 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:53 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 1082 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:54 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:54 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:54 +0700] "GET /go.php HTTP/1.1" 301 1016 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:54 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:55 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:55 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:55 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:55 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:56 +0700] "GET /6.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:56 +0700] "GET /i1.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:56 +0700] "GET /4.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:56 +0700] "GET /002.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:56 +0700] "GET /1100.php HTTP/1.1" 301 1018 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:57 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:57 +0700] "GET /v4.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:57 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:57 +0700] "GET /0x1949.php HTTP/1.1" 301 1057 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:57 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:58 +0700] "GET /build.php HTTP/1.1" 301 1056 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:58 +0700] "GET /x4.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:58 +0700] "GET /max.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:58 +0700] "GET /m.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:58 +0700] "GET /m.php HTTP/1.1" 301 1015 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:59 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:59 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:59 +0700] "GET /02.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:34:59 +0700] "GET /gmo.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /20.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /f35.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /w.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /fwe.php HTTP/1.1" 301 1054 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:00 +0700] "GET /xl2023.php HTTP/1.1" 301 1020 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:01 +0700] "GET /17.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:01 +0700] "GET /yu.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:01 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:02 +0700] "GET /ge.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:02 +0700] "GET /25.php HTTP/1.1" 301 1053 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:02 +0700] "GET /3.php HTTP/1.1" 301 1052 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:02 +0700] "GET /upload/wp-info.php HTTP/1.1" 301 1065 "-" "-"
48.218.182.166 - - [10/Oct/2025:04:35:02 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "-"
124.226.222.66 - - [10/Oct/2025:05:47:51 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
18.224.192.118 - - [10/Oct/2025:09:35:20 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 zgrab/0.x"
50.16.72.11 - - [10/Oct/2025:09:36:20 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36"
182.43.70.143 - - [10/Oct/2025:09:38:25 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
196.251.81.209 - - [10/Oct/2025:11:48:00 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "python-requests/2.32.4"
95.173.216.42 - - [10/Oct/2025:12:24:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:24:26 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:24:35 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:24:42 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:24:56 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:25:02 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:25:10 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [10/Oct/2025:12:25:16 +0700] "GET /.aws/credentials HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
162.14.197.180 - - [10/Oct/2025:13:41:01 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
195.211.188.77 - - [10/Oct/2025:13:43:06 +0700] "HEAD / HTTP/1.1" 301 206 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [10/Oct/2025:13:43:06 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
195.211.188.77 - - [10/Oct/2025:13:43:06 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
128.199.146.17 - - [10/Oct/2025:16:26:08 +0700] "GET /sftp-config.json HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
128.199.146.17 - - [10/Oct/2025:16:26:08 +0700] "GET /.vscode/sftp.json HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
20.243.232.233 - - [10/Oct/2025:16:30:21 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:21 +0700] "GET /zxl.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:21 +0700] "GET /ava.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:21 +0700] "GET /gdn.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /jga.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /natural.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /wp-domain.php HTTP/1.1" 301 1060 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:22 +0700] "GET /abcd.php HTTP/1.1" 301 1018 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:23 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:23 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:23 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:23 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:24 +0700] "GET /cong.php HTTP/1.1" 301 1018 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:25 +0700] "GET /mpvloi.php HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:25 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:25 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:25 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /num.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:26 +0700] "GET /moon.php?p= HTTP/1.1" 301 1021 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:27 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:27 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:27 +0700] "GET /karak.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:27 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:28 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:28 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1071 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:28 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:28 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:28 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:29 +0700] "GET /alfa.php HTTP/1.1" 301 1018 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:29 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:29 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:29 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /tinny.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:30 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:31 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1023 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:31 +0700] "GET /jlex.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:31 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:31 +0700] "GET /11.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:32 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:33 +0700] "GET /mah.php HTTP/1.1" 301 1017 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:33 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:33 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:33 +0700] "GET /sxo.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:34 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:34 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:34 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:34 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:34 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:35 +0700] "GET /fm.php?p= HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:35 +0700] "GET /css.php HTTP/1.1" 301 1017 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:35 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:35 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /v1.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:36 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:37 +0700] "GET /akcc.php?p= HTTP/1.1" 301 1058 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:37 +0700] "GET /406.php HTTP/1.1" 301 1017 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:37 +0700] "GET /222.php?p= HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:37 +0700] "GET /xo.php HTTP/1.1" 301 1053 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /akk.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /asdf.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /prod/infos.php HTTP/1.1" 301 1061 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:38 +0700] "GET /card.php HTTP/1.1" 301 1055 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:39 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:39 +0700] "GET /ant.php HTTP/1.1" 301 1017 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:39 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
20.243.232.233 - - [10/Oct/2025:16:30:39 +0700] "GET /wpc.php?p= HTTP/1.1" 301 1057 "-" "-"
91.224.92.127 - - [10/Oct/2025:17:16:40 +0700] "GET /about.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
91.224.92.127 - - [10/Oct/2025:17:16:47 +0700] "GET /admin.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
182.44.12.37 - - [10/Oct/2025:17:36:20 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
64.227.190.250 - - [10/Oct/2025:19:56:52 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:56:58 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:57:04 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:57:14 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:57:21 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:57:27 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
64.227.190.250 - - [10/Oct/2025:19:57:32 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
94.191.43.82 - - [10/Oct/2025:21:40:58 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
5.189.177.173 - - [11/Oct/2025:01:26:46 +0700] "HEAD / HTTP/1.1" 301 210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:28:46 +0700] "HEAD /wordpress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
125.94.144.102 - - [11/Oct/2025:01:35:36 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
5.189.177.173 - - [11/Oct/2025:01:35:45 +0700] "HEAD /Wordpress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:39:56 +0700] "HEAD /WORDPRESS HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:43:45 +0700] "HEAD /WordPress HTTP/1.1" 301 219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:48:07 +0700] "HEAD /wp HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:49:27 +0700] "HEAD /Wp HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:55:31 +0700] "HEAD /WP HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:01:56:19 +0700] "HEAD /old HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:03:02 +0700] "HEAD /Old HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:04:37 +0700] "HEAD /OLD HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:10:08 +0700] "HEAD /oldsite HTTP/1.1" 301 217 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:12:12 +0700] "HEAD /new HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:17:56 +0700] "HEAD /New HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:23:06 +0700] "HEAD /NEW HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:26:00 +0700] "HEAD /wp-old HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:27:25 +0700] "HEAD /2022 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:32:06 +0700] "HEAD /2023 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:35:42 +0700] "HEAD /2024 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:41:06 +0700] "HEAD /2017 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:42:30 +0700] "HEAD /2020 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:46:47 +0700] "HEAD /2019 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:50:30 +0700] "HEAD /2018 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:54:34 +0700] "HEAD /backup HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:02:58:35 +0700] "HEAD /test HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:02:32 +0700] "HEAD /Test HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:06:56 +0700] "HEAD /TEST HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:07:53 +0700] "HEAD /demo HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:12:47 +0700] "HEAD /bc HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:17:19 +0700] "HEAD /www HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:19:18 +0700] "HEAD /WWW HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:22:48 +0700] "HEAD /Www HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:27:28 +0700] "HEAD /2021 HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:32:44 +0700] "HEAD /main HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:33:58 +0700] "HEAD /old-site HTTP/1.1" 301 218 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:37:09 +0700] "HEAD /bk HTTP/1.1" 301 212 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:42:15 +0700] "HEAD /Backup HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:46:34 +0700] "HEAD /BACKUP HTTP/1.1" 301 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:47:15 +0700] "HEAD /SHOP HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:51:45 +0700] "HEAD /Shop HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:55:43 +0700] "HEAD /shop HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:03:58:44 +0700] "HEAD /bak HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:04:11 +0700] "HEAD /sitio HTTP/1.1" 301 215 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:06:34 +0700] "HEAD /bac HTTP/1.1" 301 213 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:10:36 +0700] "HEAD /sito HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:13:37 +0700] "HEAD /site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:17:39 +0700] "HEAD /Site HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:20:46 +0700] "HEAD /SITE HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:22:24 +0700] "HEAD /blog HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:25:30 +0700] "HEAD /BLOG HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
5.189.177.173 - - [11/Oct/2025:04:29:43 +0700] "HEAD /Blog HTTP/1.1" 301 214 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
45.154.98.70 - - [11/Oct/2025:08:01:05 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
182.42.104.32 - - [11/Oct/2025:09:12:57 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
91.224.92.127 - - [11/Oct/2025:10:36:16 +0700] "GET /about.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
91.224.92.127 - - [11/Oct/2025:10:36:24 +0700] "GET /admin.php?520 HTTP/1.1" 301 1060 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
191.101.61.182 - - [11/Oct/2025:11:07:19 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
119.45.20.16 - - [11/Oct/2025:13:14:19 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
95.173.216.42 - - [11/Oct/2025:15:08:37 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:08:44 +0700] "GET /phpinfo.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:08:50 +0700] "GET /test.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:08:57 +0700] "GET /_profiler/phpinfo HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:09:06 +0700] "GET /.env HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:09:12 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:09:20 +0700] "GET /index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
95.173.216.42 - - [11/Oct/2025:15:09:26 +0700] "GET /.aws/credentials HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
213.209.157.116 - - [11/Oct/2025:15:25:02 +0700] "GET /.env HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
213.209.157.116 - - [11/Oct/2025:15:25:03 +0700] "POST / HTTP/1.1" 301 1010 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
213.209.157.116 - - [11/Oct/2025:15:25:03 +0700] "POST / HTTP/1.1" 301 1047 "-" "python-requests/2.32.3"
213.209.157.116 - - [11/Oct/2025:15:25:04 +0700] "GET /?%3Cplay%3Ewithme%3C/%3E HTTP/1.1" 301 1071 "-" "python-requests/2.32.3"
213.209.157.116 - - [11/Oct/2025:15:25:04 +0700] "POST / HTTP/1.1" 301 1010 "-" "python-requests/2.32.3"
182.44.10.67 - - [11/Oct/2025:17:10:04 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /index/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /about.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /info.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /item.php/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /function/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/index.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /edit.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content.php.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /WSO.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:38 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /mah.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /k.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /fm.php/admin.php HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /fm.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /content.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /dropdown.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /doc.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /filemanager.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /system_log.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /new.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:39 +0700] "GET /file.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /lv.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /default.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /admin.php?attempt=1 HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /about/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /classwithtostring.php/rbzccnnp.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-includes/index.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:40 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:41 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:41 +0700] "GET /shell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:41 +0700] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:41 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /ab.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /xmlrpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /chosen.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /link.php/wp-includes/Text/network.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /cgi-bin/users.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:42 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /item.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /404.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-error.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /install.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /admin/function.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 1103 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /2.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /as/function.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /moon.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /bala.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /man.php7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /images/about.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/mah.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /man.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /click.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /aaa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /post.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /lock360.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /tiny.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /admin/autoload_classmap.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wso112233.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /images/admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /log.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /simple/function.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /theme.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:43 +0700] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-admin/maint/users.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /users.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /system.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-class.php/cux.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /shx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/packed.php/wp-includes/Text/network.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /403.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /index.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /13.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /simple.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /alfanew.php7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /22.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /admin/function.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /makeasmtp.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /config.php7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-admin/update.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-login.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-admin/user/admin.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:44 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /admin/function.php/wp-content/uploads/json.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/about.php HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /meta.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-setting.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-2019.php/chosen.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /moon.php?fm=true HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /mango.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /files/index.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/item.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/wp-2019.php HTTP/1.1" 301 1100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-fmfile.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /asasx.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/plugins/xBrain.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /.well-known/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /index.php?action=list&order=name&srt=yes HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /bless.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 1049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /css/index.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/function.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/buy.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 1050 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /defaults.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:45 +0700] "GET /modules/radio.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/content.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-links.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/admin-post.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /rbzccnnp.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /images/chosen.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-info.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /manager.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /flower.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/file.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /elp.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /shell20211028.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/plugins/linkpreview/admin.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/mah.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /disagraeosc.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-crom.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /cloud.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /g.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-cron.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /i.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /style.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/file.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /readme.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /auth.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /test.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-content/themes/pridmag/xBrain.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:46 +0700] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /aa.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /class.php?fm=true HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /footer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wikindex.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /.tmb/mariju.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /past.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wordpress/about.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /.well-known/content.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-file.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /function.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /a.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /file5.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/themes/admin%201.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-2019.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/themes/pridmag/xc.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /cc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /mah/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /menu.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /ws.php7 HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /layout.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /root.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /.well-known/link.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /link.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /TNT.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-hoard.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:47 +0700] "GET /audit.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /olux.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-checkbex.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /img/xmrlpc.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/uploads/7.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /moded.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-admin/user/content.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/uploads/options-writing.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/smaxx.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-admin/images/mango.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /phpinfo.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /ynz.PhP7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/KailzVUDOBP.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /raf.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /modules/modules/mod_simplefileuploadv1.3/404.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/php-compat/eew.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /go.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /moddofuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /function/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /cgi-bin/upfile.php HTTP/1.1" 301 1028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /.well-known/as.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /products.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /yanznopat.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-includes/class-wp-list-util-loop.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /plugins/send.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:48 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /sindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-content/uploads/option.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /xhell.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-files.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /defaul1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /cron_job.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /admin/admin.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-add-admin.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-activate.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-content/uploads/link.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /files.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /upload/wp-info.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /cms.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /assets/atomlib.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /bypass.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /.well-known/acme-challenge HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /blog.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /mailer.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-seo.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-load.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /ern1.PhP7 HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /inputs.php/wp-includes/Text/network.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /fm1.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /4index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:49 +0700] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 1097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-admin/wso.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /v.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /m.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /Assets/item.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/eew.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /fox.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /fx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /Alfa.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /f35.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /css/cong.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /shop/lock.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /gecko.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /zz.php/wp-includes/wp-includes_function.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /z.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /wp-includes/log404.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:50 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /file2.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /epinyins.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/themes.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /anone.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /ini.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /js/fm.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /ern.PhP7 HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-wso.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/shell.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /alfanew.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /edit-comments.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /s.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /assets/css/403.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/themes/setup HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /xl2023.php.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/unix.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/wp-load.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /plugins.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/assets/file.php HTTP/1.1" 301 1037 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /load.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /form.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /V5.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /webadmin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /x.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 1046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /leaf_php.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /xml.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/css/dist/list-reusable-blocks/themes.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-configs.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /img/about.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:51 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /backup.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /.well-known/upfile.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-admin/license.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /text.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /sitemap.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /r3x.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/uploads/ads.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /home.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/custom-plugin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/plugins/zgdsfage/rk3.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-conflg.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /nav-menus.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/sts.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /cron.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-admin/packed.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /uploader.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /in.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /w.php HTTP/1.1" 301 1015 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp2.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-includes/header.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:52 +0700] "GET /randkeyword.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-includes/theme-compat HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-admin/x.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wso2.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /editor.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /assets/images/niil.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /xc.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /sb.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /srx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-trackback.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-content/function.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /2index.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /admin/upload/themes-install.php HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 1088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /dirs.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /legion.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /spam.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /10.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /fw.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-admin.phphttps:/diegun.com/autoload_classmap.php HTTP/1.1" 301 1098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /t.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /bx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /upload/upload.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /wp-content/themes/fitnessbase/404.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /logs.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /vv.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:53 +0700] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /xxx.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/install.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-admin/maint/unix.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /audio.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /y.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /jquery.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/plugins/linkpreview/404.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /img/dot.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /.fk.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/uploads/2014/was-wp.php HTTP/1.1" 301 1044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /alfa-rex2.php7 HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /xxl.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:54 +0700] "GET /images/404.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /server.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /cjfuns.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /o.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /upel.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /user.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /bak.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /rxr.php?rxr HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /app.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /jp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /bbb.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /500.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-api.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /date.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /mar.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /email.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /repeater.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/languages/link.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /class.api.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /db.php HTTP/1.1" 301 1016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-admin/includes/ntfs.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /ee.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-config.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/wp-login.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /assets/images/cmd.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-content/plugins/erinyani/asasx.php?p= HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /heh.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:55 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /resize.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /network.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 1099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-confirm.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /new_license.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /f.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /sidwso.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /login.php HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /hinfofuns.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /index/wp-error_log.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/plugins/zgdsfadsk/rk3.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/themes/pridmag/asasx.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /api_download.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /w3llstore.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-admin/css/admin.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 1043 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/wso112233.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /lf.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /xleet.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /.well-known/lv.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /FoxWSOv1.php HTTP/1.1" 301 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/radio.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /doc/function.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /.well-known/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /shells.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /swm.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/x.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 1042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /config.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-admin/404.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /error.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /css/item.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:56 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /upfile.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /download.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /Sendemail.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /env.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /alfa123.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /updates.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-includes/css.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-mail.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /css/chosen.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /alf.php HTTP/1.1" 301 1017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /input.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 1106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /xp.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /.well-known/cache-compat.php HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /js/style.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /ioxi001.PhP7 HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /wp-blog.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:57 +0700] "GET /xl2023.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-signin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /file-manager.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 1041 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /.well-known/amaxx.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /libraries/joomla/css.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /cgi-bin/radio.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /file/function.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/atomlib.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /p.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /adminer.php HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-logout.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-signup.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /41.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/plugins/mainhosting/asasx.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/fw.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /settings.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 1039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /js_editor.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /images/buy.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /j.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 1091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /excel.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-includes/network.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /optimizer.php HTTP/1.1" 301 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /help.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 1087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /system_logs.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /view.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 1085 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /image.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:58 +0700] "GET /plugin.php HTTP/1.1" 301 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /symlink.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /gecko-new.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /debug.php HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /0x.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /yanz.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /sx.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /csv.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /nf_tracking.php HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wsa.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /nasgor.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /uploads/up.php HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /01.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /luxx.php HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /admin-footer.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/css/a2.php HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-cache.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/bak.php HTTP/1.1" 301 1029 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/css/sx.php HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /xmrlpc.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/css/wp-config.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 1079 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /deploy.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /3301.php HTTP/1.1" 301 1018 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin.php HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /faq.php HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /9.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /new/transjule.php HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/css/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 1108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /logs_view.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /access.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /jindex.php HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /mailer1.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:46:59 +0700] "GET /images/autoload_classmap.php HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /options.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /css/admin.php HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/repeater.php HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 1090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-head.php HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /ae.php HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-content/languages/ HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 1094 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/l10n/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /images/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /backup/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:00 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /vendor/ HTTP/1.1" 301 1054 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/x/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 1086 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /cgi-bin/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 1031 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /assets/css/ HTTP/1.1" 301 1058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 1080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /admin/editor/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /private/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-admin/ HTTP/1.1" 301 1019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 1065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:01 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 1040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 1035 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 1102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 1083 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /Site/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /include/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 1082 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /modules/ HTTP/1.1" 301 1055 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /assets/images/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /admin/uploads/ HTTP/1.1" 301 1061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /index/function.php/img/ HTTP/1.1" 301 1070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 1076 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 1036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /template/ HTTP/1.1" 301 1056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 1073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /upload/image/ HTTP/1.1" 301 1060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /shop/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /.tmb/ HTTP/1.1" 301 1052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 1057 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /components/ HTTP/1.1" 301 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 1074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /wp-includes/ HTTP/1.1" 301 1059 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
149.88.106.148 - - [11/Oct/2025:20:47:02 +0700] "GET /autoloadclassmap.php HTTP/1.1" 301 1067 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /about/function.php/ HTTP/1.1" 301 1066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 1068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /local/ HTTP/1.1" 301 1053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 1075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /php/ HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 1069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 1072 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 1078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 1077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
149.88.106.148 - - [11/Oct/2025:20:47:03 +0700] "GET /.well-knownold/ HTTP/1.1" 301 1062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
145.220.91.19 - - [11/Oct/2025:21:07:17 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0"
120.71.59.24 - - [11/Oct/2025:21:16:16 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
110.172.98.2 - - [12/Oct/2025:01:34:23 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
182.42.104.32 - - [12/Oct/2025:08:56:11 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
45.148.10.205 - - [12/Oct/2025:13:37:24 +0700] "GET / HTTP/1.1" 301 1047 "-" "python-httpx/0.28.1"
188.166.255.68 - - [12/Oct/2025:14:55:57 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 1060 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:02 +0700] "GET /.well-known/ HTTP/1.1" 301 1059 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:10 +0700] "GET /sites/default/files/ HTTP/1.1" 301 1067 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:15 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 1084 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:21 +0700] "GET /uploads/ HTTP/1.1" 301 1055 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:28 +0700] "GET /images/ HTTP/1.1" 301 1054 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
188.166.255.68 - - [12/Oct/2025:14:56:34 +0700] "GET /files/ HTTP/1.1" 301 1053 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
104.28.220.177 - - [12/Oct/2025:16:48:38 +0700] "GET /sftp-config.json HTTP/1.1" 301 1063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
104.28.220.177 - - [12/Oct/2025:16:48:40 +0700] "GET /.vscode/sftp.json HTTP/1.1" 301 1064 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
114.96.103.33 - - [12/Oct/2025:16:52:40 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
87.251.78.131 - - [12/Oct/2025:19:16:49 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15"
94.191.43.82 - - [12/Oct/2025:20:53:18 +0700] "GET / HTTP/1.1" 301 1047 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
48.218.69.181 - - [12/Oct/2025:22:13:09 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1095 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:10 +0700] "GET /zxl.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:10 +0700] "GET /gdn.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:10 +0700] "GET /new4.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:10 +0700] "GET /des.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:11 +0700] "GET /jga.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:11 +0700] "GET /abcd.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:11 +0700] "GET /nc4.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:11 +0700] "GET /we.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:11 +0700] "GET /lock360.php HTTP/1.1" 301 1021 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:12 +0700] "GET /class.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:12 +0700] "GET /ar.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:12 +0700] "GET /file.php? HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:12 +0700] "GET /cache.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /buy.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /lv.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /cong.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /mpvloi.php HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /bs1.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:13 +0700] "GET /about.php HTTP/1.1" 301 1019 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:14 +0700] "GET /js.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:14 +0700] "GET /wso.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:14 +0700] "GET /goods.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /admin.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 1063 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /moon.php?p= HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /simple.php HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /atomlib.php HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:15 +0700] "GET /classwithtostring.php HTTP/1.1" 301 1068 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:16 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 1034 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:16 +0700] "GET /radio.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:16 +0700] "GET /as.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:17 +0700] "GET /0.php HTTP/1.1" 301 1052 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:17 +0700] "GET /alfa.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:17 +0700] "GET /inputs.php HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:17 +0700] "GET /ty.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:17 +0700] "GET /wp.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:18 +0700] "GET /xx.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:18 +0700] "GET /rss.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:18 +0700] "GET /mar.php HTTP/1.1" 301 1017 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:18 +0700] "GET /tinny.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /themes.php HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /warm.PhP7 HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 1060 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /jlex.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /c.php HTTP/1.1" 301 1052 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:19 +0700] "GET /v22.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:20 +0700] "GET /byp.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:20 +0700] "GET /chosen.php?p= HTTP/1.1" 301 1060 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:20 +0700] "GET /elp.php HTTP/1.1" 301 1017 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:20 +0700] "GET /mini.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:21 +0700] "GET /lc.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:21 +0700] "GET /wp-22.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:21 +0700] "GET /up.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:21 +0700] "GET /atombil.php HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:21 +0700] "GET /1.php HTTP/1.1" 301 1052 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:22 +0700] "GET /NewFile.php HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:22 +0700] "GET /akc.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:22 +0700] "GET /manager.php?p= HTTP/1.1" 301 1061 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:22 +0700] "GET /fm.php?p= HTTP/1.1" 301 1019 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:22 +0700] "GET /css.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:23 +0700] "GET /doc.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:23 +0700] "GET /rk2.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:23 +0700] "GET /classsmtps.php HTTP/1.1" 301 1061 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:23 +0700] "GET /members.php HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:24 +0700] "GET /v1.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:24 +0700] "GET /cool.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:24 +0700] "GET /dex.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:24 +0700] "GET /akcc.php?p= HTTP/1.1" 301 1058 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:24 +0700] "GET /406.php HTTP/1.1" 301 1017 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:25 +0700] "GET /222.php?p= HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:25 +0700] "GET /akk.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:25 +0700] "GET /file1.php HTTP/1.1" 301 1056 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:25 +0700] "GET /pass.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:25 +0700] "GET /asdf.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:26 +0700] "GET /prod/infos.php HTTP/1.1" 301 1061 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:26 +0700] "GET /ioxi-o.php HTTP/1.1" 301 1057 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:26 +0700] "GET /ant.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:26 +0700] "GET /123.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:26 +0700] "GET /wpc.php?p= HTTP/1.1" 301 1020 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:27 +0700] "GET /mlex.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:27 +0700] "GET /v2.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:27 +0700] "GET /v4.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:27 +0700] "GET /ws.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /132.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /321.php HTTP/1.1" 301 1054 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /ok.php HTTP/1.1" 301 1053 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /r.php HTTP/1.1" 301 1052 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /mlex.php HTTP/1.1" 301 1055 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:28 +0700] "GET /wi.php HTTP/1.1" 301 1016 "-" "-"
48.218.69.181 - - [12/Oct/2025:22:13:29 +0700] "GET /x2a.php56 HTTP/1.1" 301 1056 "-" "-"
182.42.111.213 - - [13/Oct/2025:00:52:03 +0700] "GET / HTTP/1.1" 301 1051 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
205.210.31.148 - - [13/Oct/2025:01:37:08 +0700] "GET / HTTP/1.1" 301 1047 "-" "-"